NVD

Id
48469  
Name
CVE-2009-1176  
Description
mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a "" character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-31  
Modified Date
2009-04-18  
Seq
2009-1176  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244067 48469 CVE-2009-1176 [mapserver-users] 20090326 MapServer 5.2.2 and 4.10.4 released with security fixes  View
244068 48469 CVE-2009-1176 http://www.positronsecurity.com/advisories/2009-000.html  View
244069 48469 CVE-2009-1176 20090330 Positron Security Advisory #2009-000: Multiple Vulnerabilities in MapServer v5.2.1 and v4.10.3  View
244070 48469 CVE-2009-1176 34306  View
244071 48469 CVE-2009-1176 1021952  View
244072 48469 CVE-2009-1176 FEDORA-2009-3357  View
244073 48469 CVE-2009-1176 FEDORA-2009-3383  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44916 JVNDB-2009-005923 MapServer の mapserv におけるバッファオーバーフローの脆弱性 MapServer の mapserv の mapserv.c は、id パラメータを含む文字列の最後が "" か確認しないため、バッファオーバーフローなど、不特定の影響を受ける脆弱性が存在します。 CVE-2009-1176 38607 CVE-2009-1176 48469 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005923.html 2009-03-31 2012-12-20 View