CVE Vulnerabilities

CVE-2010-2540

Published: Aug 02, 2010 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
LOW

mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows remote attackers to have an unspecified impact via crafted arguments.

Affected Software

Name Vendor Start Version End Version
Mapserver Osgeo * 4.10.5 (including)
Mapserver Osgeo 4.2.0-beta1 (including) 4.2.0-beta1 (including)
Mapserver Osgeo 4.4.0 (including) 4.4.0 (including)
Mapserver Osgeo 4.4.0-beta1 (including) 4.4.0-beta1 (including)
Mapserver Osgeo 4.4.0-beta2 (including) 4.4.0-beta2 (including)
Mapserver Osgeo 4.4.0-beta3 (including) 4.4.0-beta3 (including)
Mapserver Osgeo 4.6.0 (including) 4.6.0 (including)
Mapserver Osgeo 4.6.0-beta1 (including) 4.6.0-beta1 (including)
Mapserver Osgeo 4.6.0-beta2 (including) 4.6.0-beta2 (including)
Mapserver Osgeo 4.6.0-beta3 (including) 4.6.0-beta3 (including)
Mapserver Osgeo 4.6.0-rc1 (including) 4.6.0-rc1 (including)
Mapserver Osgeo 4.8.0-beta1 (including) 4.8.0-beta1 (including)
Mapserver Osgeo 4.8.0-beta2 (including) 4.8.0-beta2 (including)
Mapserver Osgeo 4.8.0-beta3 (including) 4.8.0-beta3 (including)
Mapserver Osgeo 4.8.0-rc1 (including) 4.8.0-rc1 (including)
Mapserver Osgeo 4.8.0-rc2 (including) 4.8.0-rc2 (including)
Mapserver Osgeo 4.10.0 (including) 4.10.0 (including)
Mapserver Osgeo 4.10.0-beta1 (including) 4.10.0-beta1 (including)
Mapserver Osgeo 4.10.0-beta2 (including) 4.10.0-beta2 (including)
Mapserver Osgeo 4.10.0-beta3 (including) 4.10.0-beta3 (including)
Mapserver Osgeo 4.10.0-rc1 (including) 4.10.0-rc1 (including)
Mapserver Osgeo 4.10.1 (including) 4.10.1 (including)
Mapserver Osgeo 4.10.2 (including) 4.10.2 (including)
Mapserver Osgeo 4.10.3 (including) 4.10.3 (including)
Mapserver Osgeo 4.10.4 (including) 4.10.4 (including)
Mapserver Umn 4.0 (including) 4.0 (including)
Mapserver Ubuntu dapper *
Mapserver Ubuntu hardy *
Mapserver Ubuntu jaunty *
Mapserver Ubuntu karmic *
Mapserver Ubuntu lucid *
Mapserver Ubuntu upstream *

References