CVE-2010-2539: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files...

MapServer < 4.10.6, 5.x < 5.6.4 Multiple Vulnerabilities

MapServer is prone to multiple remote vulnerabilities, including a buffer overflow vulnerability and an unspecified security vulnerability affecting the CGI command line debug arguments. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

[SECURITY] [DSA 2078-1] New mapserver packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-2078-1 [email protected] http://www.debian.org/security/ Nico Golde July 31nd, 2010 http://www.debian.org/security/faq -...

DSA-2079-1 mapserver - arbitrary code execution

Bulletin has no description...

MapServer Insecure MapServ CGI Command-line Debug Args

The version of MapServer installed on the remote host allows the use of several insecure command-line debug arguments that are affected by unspecified vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

MapServer Detection

The remote web server hosts MapServer, an open source platform for publishing spatial data and interactive mapping applications to the web. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid47860; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

MapServer < 5.6.4 / 4.10.6 Multiple Vulnerabilities

Binary data 5611.prm...

Debian DSA-1914-1 : mapserver - several vulnerabilities

Several vulnerabilities have been discovered in mapserver, a CGI-based web framework to publish spatial data and interactive mapping applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0843 Missing input validation on a user-supplied map...

Debian Security Advisory DSA 1914-1 (mapserver)

The remote host is missing an update to mapserver announced via advisory DSA 1914-1. OpenVAS Vulnerability Test $Id: deb19141.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1914-1 mapserver Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1914-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MapServer < 4.10.5/5.2.3/5.4.2 Integer Overflow Vulnerability

Binary data 5210.prm...

MapServer < 5.4.2 / 5.2.3 / 4.10.5 Buffer Overflow

The remote host is running MapServer, an open source Internet map server. The installed version reportedly contains an incomplete fix for the vulnerability referenced by CVE-2009-0840. An attacker may be able to exploit this issue to cause a denial of service condition or execute arbitrary code o...

MapServer <= 4.10.x Integer Overflow Vulnerability

MapServer is prone to a remote integer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:osgeo:mapserver";...

CVE-2009-2281

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via 1 a crafted Content-Length HTTP header or 2 a large HTTP request, related to an integer overflow tha...

CVE-2009-2281

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via 1 a crafted Content-Length HTTP header or 2 a large HTTP request, related to an integer overflow tha...

CVE-2009-2281

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via 1 a crafted Content-Length HTTP header or 2 a large HTTP request, related to an integer overflow tha...

CVE-2009-2281

MapServer is vulnerable to a heap-based buffer overflow in readPostBody of cgiutil.c. The issue affects MapServer 4.x up to 4.10.4 and 5.x up to 5.4.1 (before 5.4.2), due to an integer overflow that can be triggered by a crafted Content-Length header or a large HTTP request. This results in arbit...

CVE-2009-2281

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via 1 a crafted Content-Length HTTP header or 2 a large HTTP request, related to an integer overflow tha...

CVE-2009-2281: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via 1 a crafted Content-Length HTTP header or 2 a large HTTP request, related to an integer overflow tha...

[SECURITY] [DSA 1914-1] New mapserver packages fix serveral vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA-1914-1 [email protected] http://www.debian.org/security/ Nico Golde October 22nd, 2009 http://www.debian.org/security/faq -...