CVE-2019-16279

CVE-2019-16279

About

• https://nvd.nist.gov/vuln/detail/CVE-2019-16279

PoC / Exploit

• https://github.com/jas502n/CVE-2019-16278

Environment used

• Ubuntu 18.04.4 LTS
• Nostromo nhttpd 1.9.6

Reproduction

• Server
  • Docker version:

  docker run --rm -p80:80 -it simaofsilva/cve-2019-16278

  • Script version:

  bash installation.sh 
  nhttpd -d

• Client

bash exploit.sh <Server IP> 80

The outcome will be the server will not respond.