NVD

Id
48155  
Name
CVE-2009-0840  
Description
Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-31  
Modified Date
2009-10-27  
Seq
2009-0840  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241876 48155 CVE-2009-0840 [mapserver-users] 20090326 MapServer 5.2.2 and 4.10.4 released with security fixes  View
241877 48155 CVE-2009-0840 http://trac.osgeo.org/mapserver/ticket/2943  View
241878 48155 CVE-2009-0840 DSA-1914  View
241879 48155 CVE-2009-0840 http://www.positronsecurity.com/advisories/2009-000.html  View
241880 48155 CVE-2009-0840 20090330 Positron Security Advisory #2009-000: Multiple Vulnerabilities in MapServer v5.2.1 and v4.10.3  View
241881 48155 CVE-2009-0840 34306  View
241882 48155 CVE-2009-0840 1021952  View
241883 48155 CVE-2009-0840 mapserver-contentlength-bo(49545)  View
241884 48155 CVE-2009-0840 FEDORA-2009-3357  View
241885 48155 CVE-2009-0840 FEDORA-2009-3383  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44867 JVNDB-2009-005874 MapServer の mapserv におけるヒープベースのバッファアンダーフローの脆弱性 MapServer の mapserv の cgiutil.c の readPostBody 関数には、ヒープベースのバッファアンダーフローの脆弱性が存在します。 CVE-2009-0840 38271 CVE-2009-0840 48155 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005874.html 2009-03-31 2012-12-20 View