CVE-2019-16278 - Nostromo nhttpd RCE

Vulnerability Description

Remote Code Execution vulnerability in Nostromo nhttpd versions <= 1.9.6 via directory traversal in the HTTP request handling.

Affected Versions

• Nostromo nhttpd 1.9.6 and earlier

Exploit Details

This exploit leverages a directory traversal vulnerability using URL-encoded CRLF characters (%0d) to access /bin/sh and execute arbitrary commands.

How it works:

1. Sends a POST request with path traversal: /.%0d./.%0d./.%0d./.%0d./bin/sh
2. Uses Content-Length header to control payload size
3. Executes commands via shell redirection: echo\necho\n<command> 2>&1

Usage