NVD

Id
48156  
Name
CVE-2009-0841  
Description
Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a .. (dot dot) in the id parameter.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-31  
Modified Date
2009-10-27  
Seq
2009-0841  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241886 48156 CVE-2009-0841 [mapserver-users] 20090326 MapServer 5.2.2 and 4.10.4 released with security fixes  View
241887 48156 CVE-2009-0841 http://trac.osgeo.org/mapserver/ticket/2942  View
241888 48156 CVE-2009-0841 DSA-1914  View
241889 48156 CVE-2009-0841 http://www.positronsecurity.com/advisories/2009-000.html  View
241890 48156 CVE-2009-0841 20090330 Positron Security Advisory #2009-000: Multiple Vulnerabilities in MapServer v5.2.1 and v4.10.3  View
241891 48156 CVE-2009-0841 34306  View
241892 48156 CVE-2009-0841 1021952  View
241893 48156 CVE-2009-0841 mapserver-mapserv-dir-traversal(49548)  View
241894 48156 CVE-2009-0841 FEDORA-2009-3357  View
241895 48156 CVE-2009-0841 FEDORA-2009-3383  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44868 JVNDB-2009-005875 MapServer の mapserv におけるディレクトリトラバーサルの脆弱性 MapServer の mapserv の mapserv.c には、Cygwin を伴って Windows 上で稼動している際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-0841 38272 CVE-2009-0841 48156 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005875.html 2009-03-31 2012-12-20 View