CVE-2010-0552

Published: Feb 4, 2010Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via multiple requests for a non-existent file using a long URI.

Affected (2)

Products: Geopp: Geo++ Gncaster

Geopp

1 product

Geo++ Gncaster

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Geopp Geo++ Gncaster	Up to 1.4.0.7
Geopp Geo++ Gncaster	Version 1.4.0.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://osvdb.org/62011

Source: cve@mitre.org

http://secunia.com/advisories/38323

Source: cve@mitre.org

Vendor Advisory

http://www.redteam-pentesting.de/en/advisories/rt-sa-2010-001/-geo-r-gncaster-insecure-handling-of-long-urls

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/509194/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/55974

Source: cve@mitre.org

http://osvdb.org/62011