CVEvulnerability
CVE-2008-7227
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-09-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
Affected configurations
• geoserver geoserver (<= 1.6.0)
• geoserver geoserver 1.3.0
• geoserver geoserver 1.3.2
• geoserver geoserver 1.4.0
• geoserver geoserver 1.5.0
• geoserver geoserver 1.5.1
• geoserver geoserver 1.5.2
• geoserver geoserver 1.5.3
• geoserver geoserver 1.6.0
• geoserver geoserver 1.7.0
• geoserver geoserver 3.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://jira.codehaus.org/browse/GEOS-1747 jira.codehaus.org
- http://osvdb.org/43266 osvdb.org
- http://jira.codehaus.org/browse/GEOS-1747 jira.codehaus.org
- http://osvdb.org/43266 osvdb.org