Skip to content

CVE-2012-3380

Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for...

2.1 LowFix available

CVE-2012-3380 is a low vulnerability (CVSS 2.1) in Wargio Naxsi, published August 31, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.24%, the 69th percentile. Fixed in nginx 1.2.1-2.

Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.

Exploit likelihood

1.24%Up 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.

Record: CVE-2012-3380
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-22
Updated: 2026-11-02

CVE List No score

Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.

Record: CVE-2012-3380
Updated: 2026-11-02

EUVDEUVD-2012-3352 No score

Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.

Record: EUVD-2012-3352
Updated: 2026-11-03

GitHub AdvisoriesGHSA-p669-548m-c7g3 No score

Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for...

Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.

Record: GHSA-p669-548m-c7g3
Weakness: CWE-22
Updated: 2026-11-02

OSV No score

Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.

Record: CVE-2012-3380
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-3380 No score

Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.

Record: DEBIAN-CVE-2012-3380
Updated: 2026-11-02

Affected products

wargio naxsi

Affected packages

Affected packages
Package	Affected	Fixed
`nginx` Debian:12	before 1.2.1-2	1.2.1-2
`nginx` Debian:13	before 1.2.1-2	1.2.1-2
`nginx` Debian:14	before 1.2.1-2	1.2.1-2

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References