CVEvulnerability
CVE-2010-2540
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-08-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows remote attackers to have an unspecified impact via crafted arguments.
Affected configurations
• osgeo mapserver (<= 4.10.5)
• osgeo mapserver 4.2.0
• osgeo mapserver 4.4.0
• osgeo mapserver 4.6.0
• osgeo mapserver 4.8.0
• osgeo mapserver 4.10.0
• osgeo mapserver 4.10.1
• osgeo mapserver 4.10.2
• osgeo mapserver 4.10.3
• osgeo mapserver 4.10.4
• umn mapserver 4.0
• osgeo mapserver (<= 5.6.3)
• osgeo mapserver 5.0.0
• osgeo mapserver 5.2.0
• osgeo mapserver 5.2.1
• osgeo mapserver 5.4.0
• osgeo mapserver 5.4.1
• osgeo mapserver 5.4.2
• osgeo mapserver 5.6.0
• osgeo mapserver 5.6.1
Related
Weakness · not in database (1)
References
- http://lists.osgeo.org/pipermail/mapserver-users/2010-July/066052.html lists.osgeo.org
- http://marc.info/?l=oss-security&m=127973381215859&w=2 marc.info
- http://marc.info/?l=oss-security&m=127973754121922&w=2 marc.info
- http://trac.osgeo.org/mapserver/ticket/3485 trac.osgeo.org
- http://www.securityfocus.com/bid/41855 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60852 exchange.xforce.ibmcloud.com
- http://lists.osgeo.org/pipermail/mapserver-users/2010-July/066052.html lists.osgeo.org
- http://marc.info/?l=oss-security&m=127973381215859&w=2 marc.info
- http://marc.info/?l=oss-security&m=127973754121922&w=2 marc.info
- http://trac.osgeo.org/mapserver/ticket/3485 trac.osgeo.org
- http://www.securityfocus.com/bid/41855 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60852 exchange.xforce.ibmcloud.com