CVE-2009-0842

2009-03-3118:24:00

CWE-200

[email protected]

web.nvd.nist.gov

security

vulnerability

mapserv

mapserver

cve-2009-0842

remote attackers

symlink

nvd

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.011 Low

EPSS

Percentile

84.3%

JSON

mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink.

CPENameOperatorVersion
umn:mapserverumn mapservereq4.0
osgeo:mapserverosgeo mapservereq4.2.0
osgeo:mapserverosgeo mapservereq4.4.0
osgeo:mapserverosgeo mapservereq4.6.0
osgeo:mapserverosgeo mapservereq4.8.0
osgeo:mapserverosgeo mapservereq4.10.0
osgeo:mapserverosgeo mapservereq4.10.2
osgeo:mapserverosgeo mapservereq4.10.1
osgeo:mapserverosgeo mapservereq4.10.3
osgeo:mapserverosgeo mapservereq5.0.0

CPE	Name	Operator	Version
umn:mapserver	umn mapserver	eq	4.0
osgeo:mapserver	osgeo mapserver	eq	4.2.0
osgeo:mapserver	osgeo mapserver	eq	4.4.0
osgeo:mapserver	osgeo mapserver	eq	4.6.0
osgeo:mapserver	osgeo mapserver	eq	4.8.0
osgeo:mapserver	osgeo mapserver	eq	4.10.0
osgeo:mapserver	osgeo mapserver	eq	4.10.2
osgeo:mapserver	osgeo mapserver	eq	4.10.1
osgeo:mapserver	osgeo mapserver	eq	4.10.3
osgeo:mapserver	osgeo mapserver	eq	5.0.0