MapServer < 5.6.9 / 6.0.4 / 6.2.2 / 6.4.1 SQL Injection

medium Nessus Plugin ID 72094

Language:

Synopsis

The remote web server hosts a version of MapServer that may be affected by a SQL injection vulnerability.

Description

The version of MapServer hosted on the remote web server may be affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input. Specifically, the mPostGISLayerSetTimeFilter function in mappostgis.c does not properly sanitize user-supplied input passed via PostGIS TIME filters, leading to a possible unintended disclosure of data.

Note: In order for this vulnerability to be exploited, WMS-Time must be configured and PostGIS must be in use.

Solution

Upgrade to MapServer 5.6.9 / 6.0.4 / 6.2.2 / 6.4.1 or later.

Plugin Details

Severity: Medium

ID: 72094

File Name: mapserver_6_4_1.nasl

Version: 1.9

Type: remote

Family: CGI abuses

Published: 1/22/2014

Updated: 6/5/2024

Configuration: Enable paranoid mode, Enable thorough checks

Supported Sensors: Nessus

Enable CGI Scanning: true

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2013-7262

Vulnerability Information

CPE: cpe:/a:umn:mapserver

Required KB Items: Settings/ParanoidReport, www/mapserver

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No known exploits are available

Patch Publication Date: 12/31/2013

Vulnerability Publication Date: 12/31/2013

Reference Information

CVE: CVE-2013-7262

BID: 64671

Detections

Analytics