NVD

Id
13998  
Name
CVE-2010-2540  
Description
mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows remote attackers to have an unspecified impact via crafted arguments.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-08-02  
Modified Date
2010-08-12  
Seq
2010-2540  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
77544 13998 CVE-2010-2540 [mapserver-users] 20100709 MapServer 5.6.4 and 4.10.6 released with important security fixes  View
77545 13998 CVE-2010-2540 [oss-security] 20100721 CVE id request: mapserver  View
77546 13998 CVE-2010-2540 [oss-security] 20100721 Re: CVE id request: mapserver  View
77547 13998 CVE-2010-2540 http://trac.osgeo.org/mapserver/ticket/3485  View
77548 13998 CVE-2010-2540 41855  View
77549 13998 CVE-2010-2540 mapserver-cgi-code-execution(60852)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39790 JVNDB-2010-005575 mapserv.c の MapServer における脆弱性 mapserv.c の MapServer は、デバックに対する CGI コマンドラインの引数の使用を適切に制限しないため、不特定の影響を受ける脆弱性が存在します。 CVE-2010-2540 45120 CVE-2010-2540 13998 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005575.html 2010-08-02 2012-12-20 View