10

CVE-2009-2281

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP request, related to an integer overflow that triggers a heap-based buffer overflow.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-0840.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Osgeo ≫ Mapserver Version 4.2.0 Update beta1
Osgeo ≫ Mapserver Version 4.4.0
Osgeo ≫ Mapserver Version 4.4.0 Update beta1
Osgeo ≫ Mapserver Version 4.4.0 Update beta2
Osgeo ≫ Mapserver Version 4.4.0 Update beta3
Osgeo ≫ Mapserver Version 4.6.0
Osgeo ≫ Mapserver Version 4.6.0 Update beta1
Osgeo ≫ Mapserver Version 4.6.0 Update beta2
Osgeo ≫ Mapserver Version 4.6.0 Update beta3
Osgeo ≫ Mapserver Version 4.6.0 Update rc1
Osgeo ≫ Mapserver Version 4.8.0 Update beta1
Osgeo ≫ Mapserver Version 4.8.0 Update beta2
Osgeo ≫ Mapserver Version 4.8.0 Update beta3
Osgeo ≫ Mapserver Version 4.8.0 Update rc1
Osgeo ≫ Mapserver Version 4.8.0 Update rc2
Osgeo ≫ Mapserver Version 4.10.0
Osgeo ≫ Mapserver Version 4.10.0 Update beta1
Osgeo ≫ Mapserver Version 4.10.0 Update beta2
Osgeo ≫ Mapserver Version 4.10.0 Update beta3
Osgeo ≫ Mapserver Version 4.10.0 Update rc1
Osgeo ≫ Mapserver Version 4.10.1
Osgeo ≫ Mapserver Version 4.10.2
Osgeo ≫ Mapserver Version 4.10.3
Osgeo ≫ Mapserver Version 4.10.4
Osgeo ≫ Mapserver Version 5.0.0
Osgeo ≫ Mapserver Version 5.0.0 Update beta1
Osgeo ≫ Mapserver Version 5.0.0 Update beta2
Osgeo ≫ Mapserver Version 5.0.0 Update beta3
Osgeo ≫ Mapserver Version 5.0.0 Update beta4
Osgeo ≫ Mapserver Version 5.0.0 Update beta5
Osgeo ≫ Mapserver Version 5.0.0 Update beta6
Osgeo ≫ Mapserver Version 5.0.0 Update rc1
Osgeo ≫ Mapserver Version 5.0.0 Update rc2
Osgeo ≫ Mapserver Version 5.2.0
Osgeo ≫ Mapserver Version 5.2.0 Update beta1
Osgeo ≫ Mapserver Version 5.2.0 Update beta2
Osgeo ≫ Mapserver Version 5.2.0 Update beta3
Osgeo ≫ Mapserver Version 5.2.0 Update beta4
Osgeo ≫ Mapserver Version 5.2.0 Update rc1
Osgeo ≫ Mapserver Version 5.4.0
Osgeo ≫ Mapserver Version 5.4.0 Update beta1
Osgeo ≫ Mapserver Version 5.4.0 Update beta2
Osgeo ≫ Mapserver Version 5.4.0 Update beta3
Osgeo ≫ Mapserver Version 5.4.0 Update beta4
Osgeo ≫ Mapserver Version 5.4.0 Update rc1
Osgeo ≫ Mapserver Version 5.4.0 Update rc2
Osgeo ≫ Mapserver Version 5.4.1
Umn ≫ Mapserver Version 4.0
Umn ≫ Mapserver Version 4.0 Update beta1
Umn ≫ Mapserver Version 4.0 Update beta2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.95% 0.923
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.debian.org/security/2009/dsa-1914
http://trac.osgeo.org/mapserver/ticket/2943
http://security.debian.org/pool/updates/main/m/mapserver/mapserver_4.10.0-5.1+etch4.diff.gz
Patch
http://security.debian.org/pool/updates/main/m/mapserver/mapserver_5.0.3-3+lenny4.diff.gz
Patch
http://trac.osgeo.org/mapserver/browser/tags/rel-5-4-2/mapserver/HISTORY.TXT
http://www.openwall.com/lists/oss-security/2009/07/01/1
http://www.openwall.com/lists/oss-security/2009/07/01/6