How to fix Nginx0day vulnerabilities-official patch and temporary patch

As vulnerability patches have not been released officially, temporary solutions will be released immediately after the official release. The "80 sec" team that found the vulnerability has provided some temporary solutions, as nginx has not released any relevant repair measures.

As vulnerability patches have not been released officially, temporary solutions will be released immediately after the official release.

The "80 sec" team that found the vulnerability has provided some temporary solutions, as nginx has not released any relevant repair measures.

1. ModifyPhp. Ini file

Set cgi. fix_pathinfo of php. ini to 0 and restart the php service. This is the most convenient method, but some functions of the website may be affected.

2. Modify the nginx configuration file

Modify the vhost configuration of nginx, disable related operations, and restart the nginx service.

The default value is/etc/nginx/sites-enabl.Ed/The following site configuration.

If ($ fastcgi_script_name ~ .. */. * Php ){ Return 403; }

3. Disable the upload function.

Temporarily disable all upload functions on the website, including disablingBbs'Target = '_ blank'>ForumUpload Avatar and other permissions, and wait for the official release of the vulnerability repair measures.