// For flags

CVE-2009-0843

 

Severity Score

7.8
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists.

La función msLoadQuery mapserv en MapServer v4.x y anteriores, v4.10.4 y v5.x anteriores v5.2.2, permite a atacantes remotos determinar la existencia de ficheros a través de un Path completo en el parámetro queryfile, lo que provoca diferentes mensajes de error dependiendo de si existe la ruta.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2009-03-06 CVE Reserved
  • 2009-03-31 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.2.0
Search vendor "Osgeo" for product "Mapserver" and version "4.2.0"
beta1
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.4.0
Search vendor "Osgeo" for product "Mapserver" and version "4.4.0"
-
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.4.0
Search vendor "Osgeo" for product "Mapserver" and version "4.4.0"
beta1
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.4.0
Search vendor "Osgeo" for product "Mapserver" and version "4.4.0"
beta2
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.4.0
Search vendor "Osgeo" for product "Mapserver" and version "4.4.0"
beta3
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.6.0
Search vendor "Osgeo" for product "Mapserver" and version "4.6.0"
-
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.6.0
Search vendor "Osgeo" for product "Mapserver" and version "4.6.0"
beta1
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.6.0
Search vendor "Osgeo" for product "Mapserver" and version "4.6.0"
beta2
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.6.0
Search vendor "Osgeo" for product "Mapserver" and version "4.6.0"
beta3
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.6.0
Search vendor "Osgeo" for product "Mapserver" and version "4.6.0"
rc1
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.8.0
Search vendor "Osgeo" for product "Mapserver" and version "4.8.0"
beta1
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.8.0
Search vendor "Osgeo" for product "Mapserver" and version "4.8.0"
beta2
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.8.0
Search vendor "Osgeo" for product "Mapserver" and version "4.8.0"
beta3
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.8.0
Search vendor "Osgeo" for product "Mapserver" and version "4.8.0"
rc1
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.8.0
Search vendor "Osgeo" for product "Mapserver" and version "4.8.0"
rc2
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.10.0
Search vendor "Osgeo" for product "Mapserver" and version "4.10.0"
-
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.10.0
Search vendor "Osgeo" for product "Mapserver" and version "4.10.0"
beta1
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.10.0
Search vendor "Osgeo" for product "Mapserver" and version "4.10.0"
beta2
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.10.0
Search vendor "Osgeo" for product "Mapserver" and version "4.10.0"
beta3
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.10.0
Search vendor "Osgeo" for product "Mapserver" and version "4.10.0"
rc1
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.10.1
Search vendor "Osgeo" for product "Mapserver" and version "4.10.1"
-
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.10.2
Search vendor "Osgeo" for product "Mapserver" and version "4.10.2"
-
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
4.10.3
Search vendor "Osgeo" for product "Mapserver" and version "4.10.3"
-
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.0.0
Search vendor "Osgeo" for product "Mapserver" and version "5.0.0"
-
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.0.0
Search vendor "Osgeo" for product "Mapserver" and version "5.0.0"
beta1
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.0.0
Search vendor "Osgeo" for product "Mapserver" and version "5.0.0"
beta2
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.0.0
Search vendor "Osgeo" for product "Mapserver" and version "5.0.0"
beta3
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.0.0
Search vendor "Osgeo" for product "Mapserver" and version "5.0.0"
beta4
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.0.0
Search vendor "Osgeo" for product "Mapserver" and version "5.0.0"
beta5
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.0.0
Search vendor "Osgeo" for product "Mapserver" and version "5.0.0"
beta6
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.0.0
Search vendor "Osgeo" for product "Mapserver" and version "5.0.0"
rc1
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.0.0
Search vendor "Osgeo" for product "Mapserver" and version "5.0.0"
rc2
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.2.0
Search vendor "Osgeo" for product "Mapserver" and version "5.2.0"
-
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.2.0
Search vendor "Osgeo" for product "Mapserver" and version "5.2.0"
beta1
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.2.0
Search vendor "Osgeo" for product "Mapserver" and version "5.2.0"
beta2
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.2.0
Search vendor "Osgeo" for product "Mapserver" and version "5.2.0"
beta3
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.2.0
Search vendor "Osgeo" for product "Mapserver" and version "5.2.0"
beta4
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.2.0
Search vendor "Osgeo" for product "Mapserver" and version "5.2.0"
rc1
Affected
Osgeo
Search vendor "Osgeo"
Mapserver
Search vendor "Osgeo" for product "Mapserver"
5.2.1
Search vendor "Osgeo" for product "Mapserver" and version "5.2.1"
-
Affected
Umn
Search vendor "Umn"
Mapserver
Search vendor "Umn" for product "Mapserver"
4.0
Search vendor "Umn" for product "Mapserver" and version "4.0"
-
Affected
Umn
Search vendor "Umn"
Mapserver
Search vendor "Umn" for product "Mapserver"
4.0
Search vendor "Umn" for product "Mapserver" and version "4.0"
beta1
Affected
Umn
Search vendor "Umn"
Mapserver
Search vendor "Umn" for product "Mapserver"
4.0
Search vendor "Umn" for product "Mapserver" and version "4.0"
beta2
Affected