{"cvss":9.8,"datePublished":"2024-11-07","dateUpdated":"2024-11-07","description":"Nostromo nhttpd contains a directory traversal vulnerability in the http_verify() function in a non-chrooted nhttpd server allowing for remote code execution.","dueDate":"2024-11-28","id":"CVE-2019-16278","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://www.nazgul.ch/dev/nostromo_cl.txt ; https://nvd.nist.gov/vuln/detail/CVE-2019-16278","product":"nhttpd","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Nostromo nhttpd Directory Traversal Vulnerability","vendor":"Nostromo"}