CVE-2009-1176: Buffer Overflow

Published Mar 31, 2009

Updated

mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action.

Affected Software

42 affected components

Umn Mapserver=4.0

Umn Mapserver=4.0-beta1

Umn Mapserver=4.0-beta2

OSGeo MapServer=4.2.0-beta1

OSGeo MapServer=4.4.0-beta1

OSGeo MapServer=4.4.0-beta2

OSGeo MapServer=4.6.0-beta1

OSGeo MapServer=4.6.0-beta2

OSGeo MapServer=4.6.0-beta3

OSGeo MapServer=4.8.0-beta2

OSGeo MapServer=4.8.0-beta1

OSGeo MapServer=4.8.0-beta3

OSGeo MapServer=4.8.0-rc2

OSGeo MapServer=4.8.0-rc1

OSGeo MapServer=4.10.0

OSGeo MapServer=4.10.0-beta1

OSGeo MapServer=4.10.0-rc1

OSGeo MapServer=4.10.0-beta3

OSGeo MapServer=4.10.0-beta2

OSGeo MapServer=4.10.2

OSGeo MapServer=4.10.1

OSGeo MapServer=4.10.3

OSGeo MapServer=5.0.0-beta5

OSGeo MapServer=5.0.0-beta6

OSGeo MapServer=5.0.0-beta3

OSGeo MapServer=5.0.0-beta4

OSGeo MapServer=5.0.0-beta1

OSGeo MapServer=5.0.0-beta2

OSGeo MapServer=5.0.0-rc1

OSGeo MapServer=5.2.0

OSGeo MapServer=5.2.0-beta2

OSGeo MapServer=5.2.0-beta1

OSGeo MapServer=5.2.0-beta3

OSGeo MapServer=5.2.0-beta4

OSGeo MapServer=5.2.0-rc1

OSGeo MapServer=5.2.1

OSGeo MapServer=4.6.0

OSGeo MapServer=4.6.0-rc1

OSGeo MapServer=5.0.0-rc2

OSGeo MapServer=5.0.0

OSGeo MapServer=4.4.0

OSGeo MapServer=4.4.0-beta3

Remediation

Patch Available

http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html

Event History

Mar 31, 2009

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

via NVD·06:24 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-1176?

CVE-2009-1176 has been classified as a high severity vulnerability due to its potential for remote buffer overflow attacks.

How do I fix CVE-2009-1176?

To fix CVE-2009-1176, upgrade MapServer to version 4.10.4 or later, or 5.2.2 or later.

What versions of MapServer are affected by CVE-2009-1176?

CVE-2009-1176 affects MapServer versions prior to 4.10.4 and 5.2.2.

Can CVE-2009-1176 be exploited remotely?

Yes, CVE-2009-1176 can be exploited remotely through a specially crafted long id parameter in a query action.

What type of attacks can CVE-2009-1176 facilitate?

CVE-2009-1176 can facilitate buffer overflow attacks, potentially leading to arbitrary code execution.