CVE-2009-2281: Buffer Overflow

Published Oct 23, 2009
·
Updated

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP request, related to an integer overflow that triggers a heap-based buffer overflow. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-0840.

Affected Software

50 affected components
Umn Mapserver=4.0
Umn Mapserver=4.0-beta1
Umn Mapserver=4.0-beta2
OSGeo MapServer=4.2.0-beta1
OSGeo MapServer=4.4.0-beta1
OSGeo MapServer=4.4.0-beta2
OSGeo MapServer=4.6.0-beta1
OSGeo MapServer=4.6.0-beta2
OSGeo MapServer=4.6.0-beta3
OSGeo MapServer=4.8.0-beta2
OSGeo MapServer=4.8.0-beta1
OSGeo MapServer=4.8.0-beta3
OSGeo MapServer=4.8.0-rc2
OSGeo MapServer=4.8.0-rc1
OSGeo MapServer=4.10.0
OSGeo MapServer=4.10.0-beta1
OSGeo MapServer=4.10.0-rc1
OSGeo MapServer=4.10.0-beta3
OSGeo MapServer=4.10.0-beta2
OSGeo MapServer=4.10.4
OSGeo MapServer=4.10.2
OSGeo MapServer=4.10.1
OSGeo MapServer=4.10.3
OSGeo MapServer=5.0.0-beta5
OSGeo MapServer=5.0.0-beta6
OSGeo MapServer=5.0.0-beta3
OSGeo MapServer=5.0.0-beta4
OSGeo MapServer=5.0.0-beta1
OSGeo MapServer=5.0.0-beta2
OSGeo MapServer=5.0.0-rc1
OSGeo MapServer=5.2.0
OSGeo MapServer=5.2.0-beta2
OSGeo MapServer=5.2.0-beta1
OSGeo MapServer=5.2.0-beta3
OSGeo MapServer=5.2.0-beta4
OSGeo MapServer=5.2.0-rc1
OSGeo MapServer=5.4.0
OSGeo MapServer=5.4.0-beta1
OSGeo MapServer=5.4.0-beta2
OSGeo MapServer=5.4.0-beta4
OSGeo MapServer=5.4.0-beta3
OSGeo MapServer=5.4.0-rc2
OSGeo MapServer=5.4.0-rc1
OSGeo MapServer=5.4.1
OSGeo MapServer=4.6.0
OSGeo MapServer=4.6.0-rc1
OSGeo MapServer=5.0.0-rc2
OSGeo MapServer=5.0.0
OSGeo MapServer=4.4.0
OSGeo MapServer=4.4.0-beta3

Remediation

Patch Available

http://security.debian.org/pool/updates/main/m/mapserver/mapserver_4.10.0-5.1+etch4.diff.gz

Patch Available

http://security.debian.org/pool/updates/main/m/mapserver/mapserver_5.0.3-3+lenny4.diff.gz

Event History

Oct 23, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2009-2281?

CVE-2009-2281 has a severity rating that suggests it can allow remote attackers to execute arbitrary code, indicating a critical risk.

2

How do I fix CVE-2009-2281?

To fix CVE-2009-2281, upgrade to MapServer version 5.4.2 or later, as these versions have addressed the vulnerability.

3

What software is affected by CVE-2009-2281?

CVE-2009-2281 affects MapServer versions from 4.0 up to 4.10.4 and also includes certain 5.x versions prior to 5.4.2.

4

Can CVE-2009-2281 be exploited remotely?

Yes, CVE-2009-2281 can be exploited remotely by attackers using manipulated Content-Length HTTP headers or oversized HTTP requests.

5

What type of vulnerability is CVE-2009-2281?

CVE-2009-2281 is classified as a heap-based buffer underflow vulnerability.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203