CVE-2008-7227

PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:geoserver:geoserver:*:beta4:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.3.0:beta:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.3.0:pr1:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.3.0:rc2:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.3.0:rc4:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.3.0:rc6:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.3.0:rc7:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.3.2:*:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.4.0:m0:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.4.0:m1:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.5.0:beta2:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.5.0:rc3:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.5.0:rc4:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.5.1:rc1:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.5.3:*:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.6.0:*:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.6.0:beta1:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.6.0:beta2:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.6.0:rc1:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.6.0:rc2:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.6.0:rc3:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:1.7.0:beta1:*:*:*:*:*:*
cpe:2.3:a:geoserver:geoserver:3.0:beta3:*:*:*:*:*:*

History

21 Nov 2024, 00:58

Type Values Removed Values Added
References () http://jira.codehaus.org/browse/GEOS-1747 - () http://jira.codehaus.org/browse/GEOS-1747 -
References () http://osvdb.org/43266 - () http://osvdb.org/43266 -

Information

Published : 2009-09-14 14:30

Updated : 2024-11-21 00:58


NVD link : CVE-2008-7227

Mitre link : CVE-2008-7227

CVE.ORG link : CVE-2008-7227


JSON object : View

Products Affected

geoserver

  • geoserver
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer