PT-2007-5787 · Mapserver · Mapserver

Publicado 2007-08-31 · Atualizado 2016-06-15 · CVE-2007-4629

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MapServer versions prior to 4.10.3

Description The issue is related to a buffer overflow in the processLine function in maptemplate.c. This can be triggered by a mapfile containing a long layer name, group name, or metadata entry name, potentially allowing attackers to cause a denial of service or execute arbitrary code.

Recommendations For versions prior to 4.10.3, update to version 4.10.3 or later to resolve the issue.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-4629

DSA-1539-1

Produtos afetados

Mapserver

Referências · 16

• http://vupen.com/english/advisories/2007/2974 · Nota
• http://trac.osgeo.org/mapserver/ticket/2252 · Nota
• http://secunia.com/advisories/29688 · Nota
• http://securityreason.com/securityalert/3082 · Nota
• http://secunia.com/advisories/26561 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4629 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=272081 · Nota
• https://security-tracker.debian.org/tracker/CVE-2007-4629 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-4629 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2007-4629 · Aviso do Fabricante
• http://mapserver.gis.umn.edu/download/current/HISTORY.TXT · Correção
• http://secunia.com/advisories/26718 · Nota
• https://redhat.com/archives/fedora-package-announce/2007-September/msg00096.html · Aviso do Fabricante
• http://debian.org/security/2008/dsa-1539 · Aviso do Fabricante
• http://securityfocus.com/bid/25582 · Nota