Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
osgeo mapserver 5.2.1 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2009-1176
mapserv.c in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote malicious users to conduct buffer-overflow attacks or have unspecified other impact via a ...
Umn Mapserver 4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.10.3
Osgeo Mapserver 5.0.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.2.1
NA
CVE-2009-1177
Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2 have unknown impact and remote attack vectors.
Umn Mapserver 4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.10.3
Osgeo Mapserver 5.0.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.2.1
NA
CVE-2009-0839
Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote malicious users to execute arbitrary code via a crafted id parameter in a query action.
Umn Mapserver 4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.10.3
Osgeo Mapserver 5.0.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.2.1
NA
CVE-2009-0840
Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2 allows remote malicious users to have an unknown impact via a negative value in the Content-Length HTTP header.
Umn Mapserver 4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.10.3
Osgeo Mapserver 5.0.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.2.1
NA
CVE-2009-0841
Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2, when running on Windows with Cygwin, allows remote malicious users to create arbitrary files via a .. (dot dot) in the id parameter.
Umn Mapserver 4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.10.3
Osgeo Mapserver 5.0.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.2.1
NA
CVE-2009-0842
mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2 allows remote malicious users to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekr...
Umn Mapserver 4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.10.3
Osgeo Mapserver 5.0.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.2.1
NA
CVE-2009-0843
The msLoadQuery function in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2 allows remote malicious users to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether thi...
Umn Mapserver 4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.10.3
Osgeo Mapserver 5.0.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.2.1
NA
CVE-2010-2539
Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer prior to 4.10.6 and 5.x prior to 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files.
Umn Mapserver 4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.10.4
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.10.3
Osgeo Mapserver
Osgeo Mapserver 5.0.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.2.1
Osgeo Mapserver 5.4.0
Osgeo Mapserver 5.4.2
Osgeo Mapserver 5.4.1
Osgeo Mapserver 5.6.0
Osgeo Mapserver 5.6.1
NA
CVE-2010-2540
mapserv.c in mapserv in MapServer prior to 4.10.6 and 5.x prior to 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows remote malicious users to have an unspecified impact via crafted arguments.
Umn Mapserver 4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.10.4
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.10.3
Osgeo Mapserver
Osgeo Mapserver 5.0.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.2.1
Osgeo Mapserver 5.4.0
Osgeo Mapserver 5.4.2
Osgeo Mapserver 5.4.1
Osgeo Mapserver 5.6.0
Osgeo Mapserver 5.6.1
NA
CVE-2011-2704
Stack-based buffer overflow in MapServer prior to 4.10.7 and 5.x prior to 5.6.7 allows remote malicious users to execute arbitrary code via vectors related to OGC filter encoding.
Osgeo Mapserver 4.2.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.10.4
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.10.3
Osgeo Mapserver 4.10.5
Osgeo Mapserver
Umn Mapserver 5.6.4
Umn Mapserver 5.2.2
Umn Mapserver 5.6.5
Umn Mapserver 5.6.6
Umn Mapserver 5.2.3
Osgeo Mapserver 5.0.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.2.1
Osgeo Mapserver 5.4.0
Osgeo Mapserver 5.4.2
Osgeo Mapserver 5.4.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316
firmware
CVE-2024-30078
CVE-2024-5995
remote code execution
logic flaw
CVE-2024-20693
CVE-2024-37315
CVE-2024-5464
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »