Lucene search

K
OsgeoMapserver

18 matches found

CVE
CVE
added 2009/03/31 6:24 p.m.68 views

CVE-2009-0840

Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header.

10CVSS6.5AI score0.02704EPSS
CVE
CVE
added 2017/03/15 4:59 p.m.67 views

CVE-2017-5522

Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving WFS get feature requests.

9.8CVSS9.6AI score0.04844EPSS
CVE
CVE
added 2009/03/31 6:24 p.m.65 views

CVE-2009-0843

The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists.

7.8CVSS6.4AI score0.01032EPSS
CVE
CVE
added 2009/03/31 6:24 p.m.63 views

CVE-2009-0839

Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action.

10CVSS7.8AI score0.08317EPSS
CVE
CVE
added 2019/10/29 9:15 p.m.63 views

CVE-2010-1678

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing.

7.5CVSS7.5AI score0.00681EPSS
CVE
CVE
added 2010/08/02 10:0 p.m.63 views

CVE-2010-2540

mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows remote attackers to have an unspecified impact via crafted arguments.

10CVSS6.6AI score0.05738EPSS
CVE
CVE
added 2009/03/31 6:24 p.m.60 views

CVE-2009-0841

Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a .. (dot dot) in the id parameter.

10CVSS6.5AI score0.00786EPSS
CVE
CVE
added 2009/10/23 6:30 p.m.58 views

CVE-2009-2281

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP request, related to an integer overflow t...

10CVSS7.8AI score0.11504EPSS
CVE
CVE
added 2009/03/31 6:24 p.m.56 views

CVE-2009-0842

mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink.

4.3CVSS6.2AI score0.00832EPSS
CVE
CVE
added 2010/08/02 10:0 p.m.53 views

CVE-2010-2539

Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files.

2.1CVSS6.1AI score0.00063EPSS
CVE
CVE
added 2011/08/01 7:55 p.m.52 views

CVE-2011-2704

Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors related to OGC filter encoding.

7.5CVSS8AI score0.06405EPSS
CVE
CVE
added 2009/03/31 6:24 p.m.51 views

CVE-2009-1176

mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action.

10CVSS6.8AI score0.02026EPSS
CVE
CVE
added 2011/08/01 7:55 p.m.51 views

CVE-2011-2703

Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.

7.5CVSS8.4AI score0.01573EPSS
CVE
CVE
added 2009/03/31 6:24 p.m.45 views

CVE-2009-1177

Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact and remote attack vectors.

10CVSS6.6AI score0.01524EPSS
CVE
CVE
added 2021/05/06 1:15 p.m.45 views

CVE-2021-32062

MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 does not properly enforce the MS_MAP_NO_PATH and MS_MAP_PATTERN restrictions that are intended to control the locations from which a mapfile may be loaded (with MapServer CGI).

5.3CVSS5.1AI score0.00672EPSS
CVE
CVE
added 2014/01/05 8:55 p.m.43 views

CVE-2013-7262

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter.

6.8CVSS8.2AI score0.0025EPSS
CVE
CVE
added 2011/08/01 8:55 p.m.36 views

CVE-2011-2975

Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.

6.8CVSS7.3AI score0.02808EPSS
CVE
CVE
added 2016/12/08 8:59 a.m.35 views

CVE-2016-9839

In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails.

7.5CVSS7.2AI score0.00355EPSS