CVE-2013-7262

2014-01-0500:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

52.5%

JSON

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in
mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used,
allows remote attackers to execute arbitrary SQL commands via a crafted
string in a PostGIS TIME filter.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchmapserver< 6.0.1-2ubuntu1.1UNKNOWN
ubuntu12.10noarchmapserver< 6.0.1-3.2ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchmapserver< 6.0.1-3.2ubuntu0.13.04.1UNKNOWN
ubuntu13.10noarchmapserver< 6.2.1-3ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	mapserver	< 6.0.1-2ubuntu1.1	UNKNOWN
ubuntu	12.10	noarch	mapserver	< 6.0.1-3.2ubuntu0.12.10.1	UNKNOWN
ubuntu	13.04	noarch	mapserver	< 6.0.1-3.2ubuntu0.13.04.1	UNKNOWN
ubuntu	13.10	noarch	mapserver	< 6.2.1-3ubuntu0.1	UNKNOWN