CVE-2009-2281

Опубликовано: 23 окт. 2009

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP request, related to an integer overflow that triggers a heap-based buffer overflow. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-0840.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:osgeo:mapserver:4.2.0:beta1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.4.0:*:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.4.0:beta1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.4.0:beta2:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.4.0:beta3:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.6.0:beta1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.6.0:beta2:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.6.0:beta3:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.6.0:rc1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.8.0:beta1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.8.0:beta2:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.8.0:beta3:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.8.0:rc1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.8.0:rc2:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.10.0:*:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.10.0:beta1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.10.0:beta2:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.10.0:beta3:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.10.0:rc1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.10.1:*:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.10.2:*:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.10.3:*:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:4.10.4:*:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.0.0:beta1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.0.0:beta2:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.0.0:beta3:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.0.0:beta4:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.0.0:beta5:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.0.0:beta6:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.0.0:rc1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.0.0:rc2:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.2.0:beta1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.2.0:beta2:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.2.0:beta3:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.2.0:beta4:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.2.0:rc1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.4.0:*:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.4.0:beta1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.4.0:beta2:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.4.0:beta3:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.4.0:beta4:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.4.0:rc1:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.4.0:rc2:*:*:*:*:*:*

cpe:2.3:a:osgeo:mapserver:5.4.1:*:*:*:*:*:*:*

cpe:2.3:a:umn:mapserver:4.0:*:*:*:*:*:*:*

cpe:2.3:a:umn:mapserver:4.0:beta1:*:*:*:*:*:*

cpe:2.3:a:umn:mapserver:4.0:beta2:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.11504

Средний

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2009-2281

ubuntu

больше 16 лет назад

CVE-2009-2281

debian

больше 16 лет назад

Multiple heap-based buffer underflows in the readPostBody function in ...

GHSA-6726-5cj2-9h6f

github

почти 4 года назад

EPSS

Процентиль: 93%

0.11504

Средний

10 Critical

CVSS2

Дефекты

CWE-119