CVE-2009-0839

2009-03-3118:24:45

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.161

Percentile

96.0%

JSON

Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action.

OSVersionArchitecturePackageVersionFilename
Debian12allmapserver< 5.2.2-1mapserver_5.2.2-1_all.deb
Debian11allmapserver< 5.2.2-1mapserver_5.2.2-1_all.deb
Debian999allmapserver< 5.2.2-1mapserver_5.2.2-1_all.deb
Debian13allmapserver< 5.2.2-1mapserver_5.2.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	mapserver	< 5.2.2-1	mapserver_5.2.2-1_all.deb
Debian	11	all	mapserver	< 5.2.2-1	mapserver_5.2.2-1_all.deb
Debian	999	all	mapserver	< 5.2.2-1	mapserver_5.2.2-1_all.deb
Debian	13	all	mapserver	< 5.2.2-1	mapserver_5.2.2-1_all.deb