Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-0839
HistoryMar 31, 2009 - 6:24 p.m.

CVE-2009-0839

2009-03-3118:24:45
CWE-119
[email protected]
web.nvd.nist.gov
41
2
cve-2009-0839
buffer overflow
mapserver
remote code execution
security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.161 Low

EPSS

Percentile

96.0%

JSON

Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action.

Affected configurations

NVD
Node
osgeomapserverMatch4.2.0beta1
OR
osgeomapserverMatch4.4.0
OR
osgeomapserverMatch4.4.0beta1
OR
osgeomapserverMatch4.4.0beta2
OR
osgeomapserverMatch4.4.0beta3
OR
osgeomapserverMatch4.6.0
OR
osgeomapserverMatch4.6.0beta1
OR
osgeomapserverMatch4.6.0beta2
OR
osgeomapserverMatch4.6.0beta3
OR
osgeomapserverMatch4.6.0rc1
OR
osgeomapserverMatch4.8.0beta1
OR
osgeomapserverMatch4.8.0beta2
OR
osgeomapserverMatch4.8.0beta3
OR
osgeomapserverMatch4.8.0rc1
OR
osgeomapserverMatch4.8.0rc2
OR
osgeomapserverMatch4.10.0
OR
osgeomapserverMatch4.10.0beta1
OR
osgeomapserverMatch4.10.0beta2
OR
osgeomapserverMatch4.10.0beta3
OR
osgeomapserverMatch4.10.0rc1
OR
osgeomapserverMatch4.10.1
OR
osgeomapserverMatch4.10.2
OR
osgeomapserverMatch4.10.3
OR
osgeomapserverMatch5.0.0
OR
osgeomapserverMatch5.0.0beta1
OR
osgeomapserverMatch5.0.0beta2
OR
osgeomapserverMatch5.0.0beta3
OR
osgeomapserverMatch5.0.0beta4
OR
osgeomapserverMatch5.0.0beta5
OR
osgeomapserverMatch5.0.0beta6
OR
osgeomapserverMatch5.0.0rc1
OR
osgeomapserverMatch5.0.0rc2
OR
osgeomapserverMatch5.2.0
OR
osgeomapserverMatch5.2.0beta1
OR
osgeomapserverMatch5.2.0beta2
OR
osgeomapserverMatch5.2.0beta3
OR
osgeomapserverMatch5.2.0beta4
OR
osgeomapserverMatch5.2.0rc1
OR
osgeomapserverMatch5.2.1
OR
umnmapserverMatch4.0
OR
umnmapserverMatch4.0beta1
OR
umnmapserverMatch4.0beta2

Social References

More

Related

prion 1
cvelist 1
nvd 1
debiancve 1
ubuntucve 2
securityvulns 4
openvas 11
nessus 4
osv 1
debian 1
fedora 4
redhatcve 7
seebug 1
prion
prion
Stack overflow
2009-03-31 18:24:00
cvelist
cvelist
CVE-2009-0839
2009-03-31 18:00:00
nvd
nvd
CVE-2009-0839
2009-03-31 18:24:45
debiancve
debiancve
CVE-2009-0839
2009-03-31 18:24:45
ubuntucve
ubuntucve
CVE-2009-0839
2009-03-31 00:00:00
CVE-2009-1177
2009-03-31 00:00:00
securityvulns
securityvulns
Positron Security Advisory #2009-000: Multiple Vulnerabilities in MapServer v5.2.1 and v4.10.3
2009-04-01 00:00:00
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2009-04-01 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2009-10-23 00:00:00
openvas
openvas
Debian Security Advisory DSA 1914-1 (mapserver)
2009-10-27 00:00:00
Fedora Core 11 FEDORA-2009-9230 (mapserver)
2009-09-09 00:00:00
MapServer < 4.10.4, 5.x < 5.2.2 Multiple Vulnerabilities
2009-04-08 00:00:00
nessus
nessus
Debian DSA-1914-1 : mapserver - several vulnerabilities
2010-02-24 00:00:00
Fedora 10 : mapserver-5.2.2-1.fc10 (2009-3357)
2009-04-23 00:00:00
MapServer < 5.2.2 / 4.10.4 Multiple Flaws
2009-04-02 00:00:00
osv
osv
mapserver - serveral vulnerabilities
2009-10-22 00:00:00
debian
debian
[SECURITY] [DSA 1914-1] New mapserver packages fix serveral vulnerabilities
2009-10-22 18:33:58
fedora
fedora
[SECURITY] Fedora 10 Update: mapserver-5.2.2-1.fc10
2009-04-06 20:31:48
[SECURITY] Fedora 10 Update: mapserver-5.2.3-1.fc10
2009-09-03 00:32:06
[SECURITY] Fedora 11 Update: mapserver-5.2.3-1.fc11
2009-09-03 00:28:48
redhatcve
redhatcve
CVE-2009-1177
2019-10-04 21:33:19
CVE-2009-0843
2019-10-04 21:26:13
CVE-2009-1176
2019-10-04 21:33:23
seebug
seebug
MapServer mapserv็จ‹ๅบๅคšไธช่ฟœ็จ‹ๅฎ‰ๅ…จๆผๆดž
2009-04-02 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.161 Low

EPSS

Percentile

96.0%

JSON
Related for CVE-2009-0839
prion1cvelist1nvd1debiancve1ubuntucve2securityvulns4openvas11nessus4osv1debian1fedora4redhatcve7seebug1