NVD

Id
48158  
Name
CVE-2009-0843  
Description
The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-03-31  
Modified Date
2009-10-27  
Seq
2009-0843  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241905 48158 CVE-2009-0843 [mapserver-users] 20090326 MapServer 5.2.2 and 4.10.4 released with security fixes  View
241906 48158 CVE-2009-0843 http://trac.osgeo.org/mapserver/ticket/2939  View
241907 48158 CVE-2009-0843 DSA-1914  View
241908 48158 CVE-2009-0843 http://www.positronsecurity.com/advisories/2009-000.html  View
241909 48158 CVE-2009-0843 20090330 Positron Security Advisory #2009-000: Multiple Vulnerabilities in MapServer v5.2.1 and v4.10.3  View
241910 48158 CVE-2009-0843 34306  View
241911 48158 CVE-2009-0843 1021952  View
241912 48158 CVE-2009-0843 FEDORA-2009-3357  View
241913 48158 CVE-2009-0843 FEDORA-2009-3383  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44870 JVNDB-2009-005877 MapServer の mapser における任意のファイルの存在を特定される脆弱性 MapServer の mapserv の msLoadQuery 関数には、任意のファイルの存在を特定される脆弱性が存在します。 CVE-2009-0843 38274 CVE-2009-0843 48158 7.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005877.html 2009-03-31 2012-12-20 View