CVE-2009-3898

33

FAUCET Score

CVE-2009-3898 describes a directory traversal vulnerability in Nginx (Engine X) versions prior to 0.7.63 and 0.8.17. This flaw allows remote authenticated users to create or overwrite arbitrary files on the server by including a ".." in the Destination HTTP header when using WebDAV COPY or MOVE methods. The vulnerability has a CVSS score of 4.9, indicating a medium severity due to requiring authentication and moderate attack complexity, with potential for partial confidentiality and integrity impact. While not currently on CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		<= 0.7.62CPE matchmatch criteria	cpe:2.3:a:f5:nginx::::::::
		0.1.0CPE matchmatch criteria	cpe:2.3:a:f5:nginx:0.1.0:::::::*
		0.1.1CPE matchmatch criteria	cpe:2.3:a:f5:nginx:0.1.1:::::::*
		0.1.2CPE matchmatch criteria	cpe:2.3:a:f5:nginx:0.1.2:::::::*
		0.1.3CPE matchmatch criteria	cpe:2.3:a:f5:nginx:0.1.3:::::::*

CVSS Data

CVSS version used by this source: 2.0

4.9MEDIUM

AV:N/AC:M/Au:S/C:P/I:P/A:N

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Exploitability Score

6.8

Impact Score

4.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

17.60%

Probability of exploitation in next 30 days

EPSS Percentile

96.8%

Percentile rank of EPSS score among Peer Group

As of 2026-07-25

Model: v2026.06.15

ExploitDB: EDB-9829 · Sep 23, 2009

This CVE's current EPSS score of 0.1760 is in the 98th percentile among its peer group of 1,424 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (8)

netgearpatch availablevia llm_extracted

Fixed in: 0.8.17+, 0.7.63+

opensshpatch availablevia llm_extracted

Fixed in: 0.8.17

power_bipatch availablevia llm_extracted

Fixed in: 0.7.63

terraformpatch availablevia llm_extracted

Fixed in: 0.8.17

dahuavendor investigatingvia llm_extracted

Fixed in: 0.7.63+

dfinityvendor investigatingvia llm_extracted

Fixed in: 0.8.17

jfrogvendor investigatingvia llm_extracted

Fixed in: 0.8.17

liferayvendor investigatingvia llm_extracted

Fixed in: 0.7.63

Vendor Advisories (8)

dfinityllm-dfinity-31804de3ff1b2c4cLOW

Directory traversal vulnerability

power_billm-power_bi-e406d7ec6a1086ffLOW

Directory traversal vulnerability

jfrogllm-jfrog-eeade3f97d1d7a6cLOW

Directory traversal vulnerability

opensshllm-openssh-631c90be5b9a109fLOW

Directory traversal vulnerability

dahuallm-dahua-0502843d537dbaa2LOW

Directory traversal vulnerability

terraformllm-terraform-2f0c465be293ab5eLOW

Directory traversal vulnerability

netgearllm-netgear-ff15f9fa5280f946LOW

Directory traversal vulnerability

liferayllm-liferay-4090fe00593a3415LOW

Directory traversal vulnerability

References

archives.neohapsis.com / archives/fulldisclosure/2009-09/0379.html

Exploit

Patch

Patch

Patch

secunia.com / advisories/36818

Vendor Advisory

secunia.com / advisories/48577

security.gentoo.org / glsa/glsa-201203-22.xml

openwall.com / lists/oss-security/2009/11/20/1

Patch

openwall.com / lists/oss-security/2009/11/23/10

Patch