Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MapServer 缓冲区错误漏洞
Vulnerability Description
Mapserver是开源地理空间(Osgeo)基金会的一套用于将空间数据和交互式地图应用程序发布到Web的开源平台。 MapServer存在缓冲区错误漏洞,如果远程攻击者向服务器上传了恶意地图文件或通过id参数传送了包含有超过128字节字符串的特制请求的话,就可以在mapserv CGI程序中触发栈溢出,导致执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A