NVD

Id
9440  
Name
CVE-2011-2703  
Description
Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-08-01  
Modified Date
2011-08-05  
Seq
2011-2703  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53908 9440 CVE-2011-2703 [mapserver-users] 20110713 MapServer 6.0.1, 5.6.7 and 4.10.7 releases with security fixes  View
53909 9440 CVE-2011-2703 http://trac.osgeo.org/mapserver/ticket/3903  View
53910 9440 CVE-2011-2703 DSA-2285  View
53911 9440 CVE-2011-2703 [oss-security] 20110719 CVE Request -- MapServer -- SQL injections in OGC filter encoding and in WMS time support.  View
53912 9440 CVE-2011-2703 [oss-security] 20110719 CVE Request -- MapServer -- Stack based buffer overflow [was: Re: Re: CVE Request -- MapServer -- SQL injections in OGC filter encoding and in WMS time support.]  View
53913 9440 CVE-2011-2703 [oss-security] 20110720 Re: CVE Request -- MapServer -- Stack based buffer overflow [was: Re: Re: CVE Request -- MapServer -- SQL injections in OGC filter encoding and in WMS time support.]  View
53914 9440 CVE-2011-2703 48720  View
53915 9440 CVE-2011-2703 mapserver-multiple-sql-injection(68682)  View
53916 9440 CVE-2011-2703 https://bugzilla.redhat.com/show_bug.cgi?id=722545  View
53917 9440 CVE-2011-2703 https://bugzilla.redhat.com/show_bug.cgi?id=723293  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34542 JVNDB-2011-004784 MapServer における SQL インジェクションの脆弱性 MapServer には、(1) OGC フィルタエンコーディングまたは (2) WMS 時間サポートに関する処理に不備があるため、SQL インジェクションの脆弱性が存在します。 CVE-2011-2703 50610 CVE-2011-2703 9440 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004784.html 2011-08-01 2012-03-27 View