PT-2016-7839 · Mapserver · Mapserver

Tbonfort · Publicado 2016-12-08 · Atualizado 2023-01-31 · CVE-2016-9839

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MapServer versions prior to 7.0.3

Description The issue is related to the OGR driver in MapServer, where error messages are too verbose. This verbosity may lead to the leakage of sensitive information if a data connection fails.

Recommendations For versions prior to 7.0.3, update to version 7.0.3 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-9839

DLA-734-1

Produtos afetados

Mapserver

Referências · 11

• https://github.com/mapserver/mapserver/pull/5356 · Aviso do Fabricante
• https://github.com/mapserver/mapserver/pull/4928 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-9839 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-9839 · Nota de Segurança
• https://ubuntu.com/security/CVE-2016-9839 · Aviso do Fabricante
• http://securityfocus.com/bid/94856 · Nota
• https://osv.dev/vulnerability/CVE-2016-9839 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2016-9839 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-9839 · Aviso do Fabricante
• https://lists.osgeo.org/pipermail/mapserver-dev/2016-December/014979.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9839 · Nota de Segurança