CVE-2009-0842

CVE-2009-0842 describes an information disclosure vulnerability in MapServer versions 4.x before 4.10.4 and 5.x before 5.2.2. Attackers can read partial contents of arbitrary invalid .map files by providing a full pathname in the 'map' parameter, which triggers an error message displaying the file's content. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with medium complexity, resulting in partial confidentiality impact without affecting integrity or availability. There is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting low current threat activity.