Security Advisory

CVE-2009-1176

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-03-31 18:00:00

Last updated 2024-08-07 05:04:48

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action.

← Browse all CVEs View on cve.org ↗