PT-2009-3736 · Mapserver · Mapserver

Publicado 2009-03-31 · Atualizado 2021-06-07 · CVE-2009-1177

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MapServer versions 4.x through 4.10.3 MapServer versions 5.x through 5.2.1

Description The issue involves multiple stack-based buffer overflows in the maptemplate.c file of the mapserv component. This could potentially allow for remote attacks, although the specific impact is not detailed.

Recommendations For MapServer versions 4.x through 4.10.3, update to version 4.10.4 or later. For MapServer versions 5.x through 5.2.1, update to version 5.2.2 or later.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-1177

Produtos afetados

Mapserver

Referências · 14

• 🔥 http://positronsecurity.com/advisories/2009-000.html · Exploit
• http://securityfocus.com/bid/34306 · Nota
• http://secunia.com/advisories/34603 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-1177 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2009-1177 · Aviso do Fabricante
• https://redhat.com/archives/fedora-package-announce/2009-April/msg00147.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2009-1177 · Aviso do Fabricante
• http://securityfocus.com/archive/1/502271/100/0/threaded · Nota
• http://securitytracker.com/id?1021952 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1177 · Nota
• https://redhat.com/archives/fedora-package-announce/2009-April/msg00170.html · Aviso do Fabricante
• http://trac.osgeo.org/mapserver/ticket/2944 · Nota
• http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2009-1177 · Nota de Segurança