CVE-2017-7529

당승표(@portfolio10)

Summary

• This lab exercise reproduces the cache vulnerability (CVE-2017-7529) that occurs during the Nginx server's Range request handling process, and the actual behavior of the vulnerability
• Vulnerability: Possible exposure of cached data due to an error in Nginx Range header handling
• Impact: Sensitive data leakage from server cache files

Environment Setup and Execution

• OS : Windows 10
• Docker, Python

1. Create a folder in a specific directory
2. Create the Dockerfile, poc.py, and docker-compose.yml files
3. Run 'docker compose up -d'
4. Access http://127.0.0.1:8080 to verify that Nginx is running
5. Install the required library via 'pip install requests'
6. Run 'python poc.py http://127.0.0.1:8080' to check the result.

Result

Conclusion

• CVE-2017-7529 is a serious cache exposure vulnerability that occurs when the Nginx server mishandles Range requests.
• An attacker can leak sensitive data by using a specific Offset.
• For secure operation, it is important to update the Nginx version, strengthen cache-related settings, and apply filtering for Range requests.