CVE-2016-9839 in MapServer
Summary
In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
12/05/2016
Disclosure
12/08/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 93982 | MapServer OGR Driver Connection information disclosure | 200 | Not defined | Official fix | CVE-2016-9839 |