PT-2009-3438 · Mapserver · Mapserver

Joe Testa · Published 2009-03-31 · Updated 2021-06-07 · CVE-2009-0842

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MapServer versions 4.x through 4.10.3 MapServer versions 5.x through 5.2.1

Description The issue allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter. This triggers the display of partial file contents within an error message. For example, a /tmp/sekrut.map symlink can be used to demonstrate this issue.

Recommendations For MapServer versions 4.x through 4.10.3, update to version 4.10.4 or later. For MapServer versions 5.x through 5.2.1, update to version 5.2.2 or later.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2009-0842

DSA-1914-1

Affected Products

Mapserver

References · 16

• 🔥 http://positronsecurity.com/advisories/2009-000.html · Exploit
• http://debian.org/security/2009/dsa-1914 · Vendor Advisory
• http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-0842 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-0842 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-April/msg00147.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-April/msg00170.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0842 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2009-0842 · Vendor Advisory
• http://securityfocus.com/bid/34306 · Note
• http://securityfocus.com/archive/1/502271/100/0/threaded · Note
• http://trac.osgeo.org/mapserver/ticket/2941 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0842 · Note
• http://secunia.com/advisories/34603 · Note
• http://securitytracker.com/id?1021952 · Note