Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

osgeo mapserver vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2013-7262
SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer prior to 6.4.1, when a WMS-Time service is used, allows remote malicious users to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter.
Osgeo Mapserver 6.2.1Umn Mapserver 6.0.0Umn Mapserver 5.2.3Osgeo Mapserver 4.10.2Osgeo Mapserver 4.10.4Osgeo Mapserver 4.6.0Osgeo Mapserver 4.8.0Osgeo Mapserver 5.0.0Osgeo Mapserver 5.2.1Osgeo Mapserver 5.4.0Osgeo Mapserver 5.4.2Osgeo Mapserver 6.2.0Osgeo Mapserver 6.0.3Osgeo Mapserver 6.0.2Osgeo Mapserver 6.0.1Osgeo Mapserver 4.10.5Osgeo Mapserver 4.2.0Osgeo Mapserver 4.4.0Osgeo Mapserver 4.10.0Osgeo Mapserver 5.2.0Osgeo Mapserver 5.6.1Osgeo Mapserver 5.6.3
10
CVSSv2
CVE-2010-2540
mapserv.c in mapserv in MapServer prior to 4.10.6 and 5.x prior to 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows remote malicious users to have an unspecified impact via crafted arguments.
Osgeo Mapserver 4.10.4Osgeo MapserverOsgeo Mapserver 4.10.0Osgeo Mapserver 4.6.0Umn Mapserver 4.0Osgeo Mapserver 4.10.3Osgeo Mapserver 4.10.1Osgeo Mapserver 4.8.0Osgeo Mapserver 4.4.0Osgeo Mapserver 4.10.2Osgeo Mapserver 4.2.0Osgeo Mapserver 5.2.0Osgeo Mapserver 5.0.0Osgeo Mapserver 5.4.0Osgeo Mapserver 5.6.0Osgeo Mapserver 5.4.2Osgeo Mapserver 5.6.1Osgeo Mapserver 5.2.1Osgeo Mapserver 5.4.1
2.1
CVSSv2
CVE-2010-2539
Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer prior to 4.10.6 and 5.x prior to 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files.
Osgeo Mapserver 4.10.1Osgeo Mapserver 4.10.0Osgeo Mapserver 4.8.0Osgeo Mapserver 4.6.0Osgeo Mapserver 4.4.0Osgeo MapserverOsgeo Mapserver 4.10.4Osgeo Mapserver 4.2.0Umn Mapserver 4.0Osgeo Mapserver 4.10.2Osgeo Mapserver 4.10.3Osgeo Mapserver 5.2.1Osgeo Mapserver 5.2.0Osgeo Mapserver 5.0.0Osgeo Mapserver 5.4.0Osgeo Mapserver 5.4.1Osgeo Mapserver 5.4.2Osgeo Mapserver 5.6.1Osgeo Mapserver 5.6.0
7.5
CVSSv2
CVE-2011-2704
Stack-based buffer overflow in MapServer prior to 4.10.7 and 5.x prior to 5.6.7 allows remote malicious users to execute arbitrary code via vectors related to OGC filter encoding.
Osgeo Mapserver 4.10.0Osgeo Mapserver 4.10.2Osgeo Mapserver 4.8.0Osgeo Mapserver 4.4.0Osgeo Mapserver 4.6.0Osgeo Mapserver 4.10.5Osgeo Mapserver 4.10.4Osgeo Mapserver 4.2.0Osgeo MapserverOsgeo Mapserver 4.10.3Osgeo Mapserver 4.10.1Osgeo Mapserver 5.2.0Osgeo Mapserver 5.0.0Osgeo Mapserver 5.4.2Osgeo Mapserver 5.4.0Osgeo Mapserver 5.6.0Umn Mapserver 5.2.3Osgeo Mapserver 5.2.1Osgeo Mapserver 5.4.1Umn Mapserver 5.6.4Umn Mapserver 5.6.5Umn Mapserver 5.6.6
7.5
CVSSv2
CVE-2011-2703
Multiple SQL injection vulnerabilities in MapServer prior to 4.10.7, 5.x prior to 5.6.7, and 6.x prior to 6.0.1 allow remote malicious users to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.
Osgeo Mapserver 4.10.3Osgeo Mapserver 4.10.1Osgeo Mapserver 4.8.0Osgeo Mapserver 4.6.0Osgeo Mapserver 4.10.0Osgeo Mapserver 4.10.2Osgeo Mapserver 4.4.0Osgeo Mapserver 4.10.5Osgeo Mapserver 4.10.4Osgeo Mapserver 4.2.0Osgeo MapserverOsgeo Mapserver 5.2.0Osgeo Mapserver 5.0.0Osgeo Mapserver 5.4.0Osgeo Mapserver 5.6.1Osgeo Mapserver 5.6.3Osgeo Mapserver 5.4.2Osgeo Mapserver 5.6.0Umn Mapserver 5.2.3Osgeo Mapserver 5.2.1Osgeo Mapserver 5.4.1Umn Mapserver 5.6.4
6.8
CVSSv2
CVE-2011-2975
Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer prior to 6.0.1 might allow remote malicious users to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.
Osgeo Mapserver 5.0.0Osgeo Mapserver 5.2.0Osgeo Mapserver 5.2.1Osgeo Mapserver 4.10.0Osgeo Mapserver 5.4.0Osgeo Mapserver 4.10.2Osgeo Mapserver 4.10.3Osgeo Mapserver 4.8.0Osgeo Mapserver 5.6.0Osgeo Mapserver 4.2.0Umn Mapserver 5.6.4Umn Mapserver 5.6.5Umn Mapserver 5.6.6Osgeo MapserverOsgeo Mapserver 5.4.1Osgeo Mapserver 4.4.0Osgeo Mapserver 4.6.0Umn Mapserver 6.0.0Osgeo Mapserver 5.4.2Osgeo Mapserver 5.6.3Umn Mapserver 5.2.2Umn Mapserver 5.6.7
10
CVSSv2
CVE-2009-2281
Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x up to and including 4.10.4 and 5.x prior to 5.4.2 allow remote malicious users to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP re...
Osgeo Mapserver 4.8.0Osgeo Mapserver 4.6.0Osgeo Mapserver 5.2.0Osgeo Mapserver 5.0.0Osgeo Mapserver 5.4.0Osgeo Mapserver 4.10.1Osgeo Mapserver 4.10.0Osgeo Mapserver 4.4.0Osgeo Mapserver 4.2.0Umn Mapserver 4.0Osgeo Mapserver 5.4.1Osgeo Mapserver 4.10.2Osgeo Mapserver 4.10.4Osgeo Mapserver 4.10.3
7.5
CVSSv2
CVE-2017-5522
Stack-based buffer overflow in MapServer prior to 6.0.6, 6.2.x prior to 6.2.4, 6.4.x prior to 6.4.5, and 7.0.x prior to 7.0.4 allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via vectors involving WFS get feature requests.
Debian Debian Linux 8.0Osgeo Mapserver 7.0.0Osgeo Mapserver 6.4.1Osgeo Mapserver 6.4.2Osgeo Mapserver 6.4.3Osgeo Mapserver 6.2.0Osgeo MapserverOsgeo Mapserver 7.0.3Osgeo Mapserver 6.4.4Osgeo Mapserver 6.4.0Osgeo Mapserver 7.0.1Osgeo Mapserver 6.2.1Osgeo Mapserver 6.2.2Osgeo Mapserver 6.2.3Osgeo Mapserver 7.0.2
10
CVSSv2
CVE-2009-1176
mapserv.c in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote malicious users to conduct buffer-overflow attacks or have unspecified other impact via a ...
Osgeo Mapserver 4.10.0Osgeo Mapserver 4.10.2Osgeo Mapserver 4.8.0Osgeo Mapserver 4.6.0Osgeo Mapserver 4.4.0Umn Mapserver 4.0Osgeo Mapserver 5.2.1Osgeo Mapserver 5.2.0Osgeo Mapserver 5.0.0Osgeo Mapserver 4.10.3Osgeo Mapserver 4.10.1Osgeo Mapserver 4.2.0
10
CVSSv2
CVE-2009-1177
Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2 have unknown impact and remote attack vectors.
Osgeo Mapserver 4.10.0Osgeo Mapserver 4.8.0Osgeo Mapserver 4.6.0Umn Mapserver 4.0Osgeo Mapserver 5.0.0Osgeo Mapserver 5.2.0Osgeo Mapserver 4.10.2Osgeo Mapserver 4.10.3Osgeo Mapserver 4.4.0Osgeo Mapserver 5.2.1Osgeo Mapserver 4.10.1Osgeo Mapserver 4.2.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
firmwareCVE-2023-52866CVE-2024-4367CVE-2024-1721CVE-2023-34992XML injectionCVE-2023-52817SQLCVE-2023-52855
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook