CVE-2010-0551: HTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to read au...

Security readout for executives and security teams

Geo++ GNCASTER 1.4.0.7 and earlier can accidentally return pieces of server memory during failed HTTP authentication. The disclosed memory may include other users' authentication headers, creating a confidentiality risk for organizations running exposed GNCASTER services. Exposure is limited to environments running Geo++ GNCASTER 1.4.0.7 or earlier, especially if the service is reachable by untrusted networks. The source bundle does not identify affected CPEs or broader product families. Prioritize if GNCASTER supports critical positioning, survey, or infrastructure workflows and is reachable beyond trusted networks. With no KEV listing or CVSS in the bundle, urgency depends mainly on deployment exposure and credential sensitivity. Mitigation focus: Identify any Geo++ GNCASTER deployments and confirm version numbers.; Restrict GNCASTER access to trusted networks until vendor guidance is confirmed.; Check Geo++ or maintainer advisories for fixed versions or supported mitigations..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.