CVE-2008-7227

PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2009-09-14

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Geoserver (Geoserver)

References

• http://jira.codehaus.org/browse/GEOS-1747
• http://osvdb.org/43266