CVE-2008-7227 Information

Description

PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an \in memory buffer\ which prevents the reporting of a service exception with unknown impact and attack vectors.

Reference

http://jira.codehaus.org/browse/GEOS-1747 http://osvdb.org/43266

Share on: