CVE-2009-0843

The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files…

published March 31, 2009

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03130 · 87.8th percentile
Published
2009-03-31T18:00Z
EPSS history
Timeline
  • 31 MAR 18:00Z
    The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files…
    cvelistv5