CVE-2009-1176

2009-03-3100:00:00

ubuntu.com

0.016 Low

EPSS

Percentile

87.6%

JSON

mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2
does not ensure that the string holding the id parameter ends in a ‘\0’
character, which allows remote attackers to conduct buffer-overflow attacks
or have unspecified other impact via a long id parameter in a query action.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchmapserver< 5.0.0-3ubuntu0.1UNKNOWN
ubuntu8.10noarchmapserver< 5.0.3-2ubuntu0.1UNKNOWN
ubuntu9.04noarchmapserver< 5.0.3-3ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	mapserver	< 5.0.0-3ubuntu0.1	UNKNOWN
ubuntu	8.10	noarch	mapserver	< 5.0.3-2ubuntu0.1	UNKNOWN
ubuntu	9.04	noarch	mapserver	< 5.0.3-3ubuntu0.1	UNKNOWN