NVD

Id
48157  
Name
CVE-2009-0842  
Description
mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-03-31  
Modified Date
2009-10-27  
Seq
2009-0842  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241896 48157 CVE-2009-0842 [mapserver-users] 20090326 MapServer 5.2.2 and 4.10.4 released with security fixes  View
241897 48157 CVE-2009-0842 http://trac.osgeo.org/mapserver/ticket/2941  View
241898 48157 CVE-2009-0842 DSA-1914  View
241899 48157 CVE-2009-0842 http://www.positronsecurity.com/advisories/2009-000.html  View
241900 48157 CVE-2009-0842 20090330 Positron Security Advisory #2009-000: Multiple Vulnerabilities in MapServer v5.2.1 and v4.10.3  View
241901 48157 CVE-2009-0842 34306  View
241902 48157 CVE-2009-0842 1021952  View
241903 48157 CVE-2009-0842 FEDORA-2009-3357  View
241904 48157 CVE-2009-0842 FEDORA-2009-3383  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44869 JVNDB-2009-005876 MapServer の mapserv における任意の無効な .map ファイルを読み取られる脆弱性 MapServer の mapserv には、任意の無効な .map ファイルを読み取られる脆弱性が存在します。 CVE-2009-0842 38273 CVE-2009-0842 48157 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005876.html 2009-03-31 2012-12-20 View