Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-0840
HistoryMar 31, 2009 - 6:24 p.m.

CVE-2009-0840

2009-03-3118:24:45
CWE-119
[email protected]
web.nvd.nist.gov
5

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.03

Percentile

90.9%

JSON

Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header.

Affected configurations

Nvd
Node
osgeomapserverMatch4.2.0beta1
OR
osgeomapserverMatch4.4.0
OR
osgeomapserverMatch4.4.0beta1
OR
osgeomapserverMatch4.4.0beta2
OR
osgeomapserverMatch4.4.0beta3
OR
osgeomapserverMatch4.6.0
OR
osgeomapserverMatch4.6.0beta1
OR
osgeomapserverMatch4.6.0beta2
OR
osgeomapserverMatch4.6.0beta3
OR
osgeomapserverMatch4.6.0rc1
OR
osgeomapserverMatch4.8.0beta1
OR
osgeomapserverMatch4.8.0beta2
OR
osgeomapserverMatch4.8.0beta3
OR
osgeomapserverMatch4.8.0rc1
OR
osgeomapserverMatch4.8.0rc2
OR
osgeomapserverMatch4.10.0
OR
osgeomapserverMatch4.10.0beta1
OR
osgeomapserverMatch4.10.0beta2
OR
osgeomapserverMatch4.10.0beta3
OR
osgeomapserverMatch4.10.0rc1
OR
osgeomapserverMatch4.10.1
OR
osgeomapserverMatch4.10.2
OR
osgeomapserverMatch4.10.3
OR
osgeomapserverMatch5.0.0
OR
osgeomapserverMatch5.0.0beta1
OR
osgeomapserverMatch5.0.0beta2
OR
osgeomapserverMatch5.0.0beta3
OR
osgeomapserverMatch5.0.0beta4
OR
osgeomapserverMatch5.0.0beta5
OR
osgeomapserverMatch5.0.0beta6
OR
osgeomapserverMatch5.0.0rc1
OR
osgeomapserverMatch5.0.0rc2
OR
osgeomapserverMatch5.2.0
OR
osgeomapserverMatch5.2.0beta1
OR
osgeomapserverMatch5.2.0beta2
OR
osgeomapserverMatch5.2.0beta3
OR
osgeomapserverMatch5.2.0beta4
OR
osgeomapserverMatch5.2.0rc1
OR
osgeomapserverMatch5.2.1
OR
umnmapserverMatch4.0
OR
umnmapserverMatch4.0beta1
OR
umnmapserverMatch4.0beta2
VendorProductVersionCPE
osgeomapserver4.2.0cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*
osgeomapserver4.4.0cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*
osgeomapserver4.4.0cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*
osgeomapserver4.4.0cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*
osgeomapserver4.4.0cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*
osgeomapserver4.6.0cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*
osgeomapserver4.6.0cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*
osgeomapserver4.6.0cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*
osgeomapserver4.6.0cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*
osgeomapserver4.6.0cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*
Rows per page:
1-10 of 421

Related

nessus 7
cve 2
debiancve 2
prion 2
cvelist 2
ubuntucve 2
redhatcve 8
nvd 1
openvas 12
securityvulns 4
osv 1
debian 1
fedora 4
seebug 1
nessus
nessus
Fedora 11 : mapserver-5.2.3-1.fc11 (2009-9230)
2009-09-03 00:00:00
Fedora 10 : mapserver-5.2.3-1.fc10 (2009-9243)
2009-09-03 00:00:00
MapServer < 5.4.2 / 5.2.3 / 4.10.5 Buffer Overflow
2009-10-27 00:00:00
cve
cve
CVE-2009-0840
2009-03-31 18:24:45
CVE-2009-2281
2009-10-23 18:30:00
debiancve
debiancve
CVE-2009-0840
2009-03-31 18:24:45
CVE-2009-2281
2009-10-23 18:30:00
prion
prion
Heap overflow
2009-03-31 18:24:00
Integer overflow
2009-10-23 18:30:00
cvelist
cvelist
CVE-2009-0840
2009-03-31 18:00:00
CVE-2009-2281
2009-10-23 18:00:00
ubuntucve
ubuntucve
CVE-2009-0840
2009-03-31 00:00:00
CVE-2009-2281
2009-10-23 00:00:00
redhatcve
redhatcve
CVE-2009-2281
2019-10-04 21:45:03
CVE-2009-0843
2019-10-04 21:26:13
CVE-2009-1177
2019-10-04 21:33:19
nvd
nvd
CVE-2009-2281
2009-10-23 18:30:00
openvas
openvas
MapServer <= 4.10.x Integer Overflow Vulnerability
2009-10-26 00:00:00
Debian Security Advisory DSA 1914-1 (mapserver)
2009-10-27 00:00:00
MapServer < 4.10.4, 5.x < 5.2.2 Multiple Vulnerabilities
2009-04-08 00:00:00
securityvulns
securityvulns
Positron Security Advisory #2009-000: Multiple Vulnerabilities in MapServer v5.2.1 and v4.10.3
2009-04-01 00:00:00
Daily web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2009-04-01 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2009-10-23 00:00:00
osv
osv
mapserver - serveral vulnerabilities
2009-10-22 00:00:00
debian
debian
[SECURITY] [DSA 1914-1] New mapserver packages fix serveral vulnerabilities
2009-10-22 18:33:58
fedora
fedora
[SECURITY] Fedora 11 Update: mapserver-5.2.3-1.fc11
2009-09-03 00:28:48
[SECURITY] Fedora 10 Update: mapserver-5.2.2-1.fc10
2009-04-06 20:31:48
[SECURITY] Fedora 10 Update: mapserver-5.2.3-1.fc10
2009-09-03 00:32:06
seebug
seebug
MapServer mapserv็จ‹ๅบๅคšไธช่ฟœ็จ‹ๅฎ‰ๅ…จๆผๆดž
2009-04-02 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.03

Percentile

90.9%

JSON
Related for NVD:CVE-2009-0840
nessus7cve2debiancve2prion2cvelist2ubuntucve2redhatcve8nvd1openvas12securityvulns4osv1debian1fedora4seebug1