| ID | CVE-2009-0842 | ||||||
| Sažetak | mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | AV:N/AC:M/Au:N/C:P/I:N/A:N | ||||||
| Zadnje važnije ažuriranje | 07-06-2021 - 15:56 | ||||||
| Objavljeno | 31-03-2009 - 18:24 |
