CVE-2012-3380

LOW 2.1CVE-2012-3380 · Published 31/08/2012 · updated 16/06/2026

In short

CVE-2012-3380 is a LOW (CVSS 2.1) vulnerability affecting naxsi (wargio).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
naxsi wargio	`≤ 0.46`	No fix yet

Description

Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.

References

code.google.com/p/naxsi
code.google.com/p/naxsi/source/detail · Patch
secunia.com/advisories/49811 · Vendor Advisory
openwall.com/lists/oss-security/2012/07/05/1
openwall.com/lists/oss-security/2012/07/06/3
osvdb.org/83617

More vulnerabilities in naxsi

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free