CVE-2009-3896

CVE-2009-3896 describes a denial-of-service vulnerability in NGINX versions 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14. A remote attacker can trigger a NULL pointer dereference and worker process crash by sending a specially crafted long URI. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with a low attack complexity and no authentication required, leading to a partial denial of service. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.