NVD

Id
49529  
Name
CVE-2009-2281  
Description
Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP request, related to an integer overflow that triggers a heap-based buffer overflow. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-0840.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-10-23  
Modified Date
2009-10-26  
Seq
2009-2281  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250418 49529 CVE-2009-2281 http://security.debian.org/pool/updates/main/m/mapserver/mapserver_4.10.0-5.1+etch4.diff.gz  View
250419 49529 CVE-2009-2281 http://security.debian.org/pool/updates/main/m/mapserver/mapserver_5.0.3-3+lenny4.diff.gz  View
250420 49529 CVE-2009-2281 http://trac.osgeo.org/mapserver/browser/tags/rel-5-4-2/mapserver/HISTORY.TXT  View
250421 49529 CVE-2009-2281 http://trac.osgeo.org/mapserver/ticket/2943  View
250422 49529 CVE-2009-2281 DSA-1914  View
250423 49529 CVE-2009-2281 [oss-security] 20090701 Re: incorrect upstream fix for CVE-2009-0840 (mapserver)  View
250424 49529 CVE-2009-2281 [oss-security] 20090701 Re: incorrect upstream fix for CVE-2009-0840 (mapserver)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45112 JVNDB-2009-006119 MapServer の mapserv におけるヒープベースのバッファオーバーフローの脆弱性 MapServer の mapserv の cgiutil.c の readPostBody 関数は、整数オーバーフローに関する不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-2281 39712 CVE-2009-2281 49529 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006119.html 2009-10-22 2012-12-20 View