PT-2009-3736 · Mapserver · Mapserver

Published 2009-03-31 · Updated 2021-06-07 · CVE-2009-1177

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MapServer versions 4.x through 4.10.3 MapServer versions 5.x through 5.2.1

Description The issue involves multiple stack-based buffer overflows in the maptemplate.c file of the mapserv component. This could potentially allow for remote attacks, although the specific impact is not detailed.

Recommendations For MapServer versions 4.x through 4.10.3, update to version 4.10.4 or later. For MapServer versions 5.x through 5.2.1, update to version 5.2.2 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-1177

Affected Products

Mapserver

References · 14

• 🔥 http://positronsecurity.com/advisories/2009-000.html · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-1177 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-1177 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-April/msg00147.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-1177 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-April/msg00170.html · Vendor Advisory
• http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-1177 · Security Note
• http://securityfocus.com/bid/34306 · Note
• http://secunia.com/advisories/34603 · Note
• http://securityfocus.com/archive/1/502271/100/0/threaded · Note
• http://securitytracker.com/id?1021952 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1177 · Note
• http://trac.osgeo.org/mapserver/ticket/2944 · Note