PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:58
Type | Values Removed | Values Added |
---|---|---|
References | () http://jira.codehaus.org/browse/GEOS-1747 - | |
References | () http://osvdb.org/43266 - |
Information
Published : 2009-09-14 14:30
Updated : 2024-11-21 00:58
NVD link : CVE-2008-7227
Mitre link : CVE-2008-7227
CVE.ORG link : CVE-2008-7227
JSON object : View
Products Affected
geoserver
- geoserver
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer