oval:org.mitre.oval:def:12430

Definition Id: oval:org.mitre.oval:def:12430

Oval ID:	oval:org.mitre.oval:def:12430
Title:	DSA-2078-1 mapserver -- several
Description:	Several vulnerabilities have been discovered in mapserver, a CGI-based web framework to publish spatial data and interactive mapping applications. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-2539 A stack-based buffer overflow in the msTmpFile function might lead to arbitrary code execution under some conditions. CVE-2010-2540 It was discovered that the CGI debug command-line arguments which are enabled by default are insecure and may allow a remote attacker to execute arbitrary code. Therefore they have been disabled by default. For the stable distribution, this problem has been fixed in version 5.0.3-3+lenny5. For the testing distribution, this problem has been fixed in version 5.6.4-1. For the unstable distribution, this problem has been fixed in version 5.6.4-1. We recommend that you upgrade your mapserver packages.
Family:	unix	Class:	patch
Reference(s):	DSA-2078-1 CVE-2010-2785	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	mapserver
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Architecture section Architecture independet section Installed architecture is all AND Packages section mapserver-doc DPKG is earlier than 5.0.3-3+lenny5 AND libmapscript-ruby DPKG is earlier than 5.0.3-3+lenny5 OR Architecture depended section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section mapserver-bin DPKG is earlier than 5.0.3-3+lenny5 AND python-mapscript DPKG is earlier than 5.0.3-3+lenny5 AND libmapscript-ruby1.8 DPKG is earlier than 5.0.3-3+lenny5 AND libmapscript-ruby1.9 DPKG is earlier than 5.0.3-3+lenny5 AND perl-mapscript DPKG is earlier than 5.0.3-3+lenny5 AND php5-mapscript DPKG is earlier than 5.0.3-3+lenny5 AND cgi-mapserver DPKG is earlier than 5.0.3-3+lenny5

Definition Id: oval:org.mitre.oval:def:6513

Oval ID:	oval:org.mitre.oval:def:6513
Title:	Debian GNU/Linux 5.0 is installed
Description:	Debian GNU/Linux 5.0 (lenny) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:5.0	Version:	7
Platform(s):	Debian GNU/Linux 5.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 5.0 is installed
Referenced By:
oval:org.mitre.oval:def:12430

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0275s

Facebook rss twitter linkedin mail