NVD

Id
48154  
Name
CVE-2009-0839  
Description
Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-31  
Modified Date
2009-10-27  
Seq
2009-0839  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241867 48154 CVE-2009-0839 [mapserver-users] 20090326 MapServer 5.2.2 and 4.10.4 released with security fixes  View
241868 48154 CVE-2009-0839 http://trac.osgeo.org/mapserver/ticket/2944  View
241869 48154 CVE-2009-0839 DSA-1914  View
241870 48154 CVE-2009-0839 http://www.positronsecurity.com/advisories/2009-000.html  View
241871 48154 CVE-2009-0839 20090330 Positron Security Advisory #2009-000: Multiple Vulnerabilities in MapServer v5.2.1 and v4.10.3  View
241872 48154 CVE-2009-0839 34306  View
241873 48154 CVE-2009-0839 1021952  View
241874 48154 CVE-2009-0839 FEDORA-2009-3357  View
241875 48154 CVE-2009-0839 FEDORA-2009-3383  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44866 JVNDB-2009-005873 MapServer の mapserv におけるスタックベースのバッファオーバーフローの脆弱性 MapServer の mapserv の mapserv.c には、サーバが過度に長い IMAGEPATH または NAME 属性を伴う地図を保持している際、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0839 38270 CVE-2009-0839 48154 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005873.html 2009-03-31 2012-12-20 View