CVE-2008-3257 Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP...
HighCVSS 10.0
EPSS 86.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bea weblogic server | = 3.1.8 | No fix listed |
| bea weblogic server | = 4.0 | No fix listed |
| bea weblogic server | = 4.0.4 | No fix listed |
| bea weblogic server | = 4.5 | No fix listed |
| bea weblogic server | = 4.5.1 | No fix listed |
| bea weblogic server | = 4.5.1-sp15 | No fix listed |
| bea weblogic server | = 4.5.2 | No fix listed |
| bea weblogic server | = 4.5.2-sp1 | No fix listed |
| bea weblogic server | = 4.5.2-sp2 | No fix listed |
| bea weblogic server | = 5.1 | No fix listed |
| bea weblogic server | = 5.1-sp1 | No fix listed |
| bea weblogic server | = 5.1-sp10 | No fix listed |
| bea weblogic server | = 5.1-sp11 | No fix listed |
| bea weblogic server | = 5.1-sp12 | No fix listed |
| bea weblogic server | = 5.1-sp13 | No fix listed |
| bea weblogic server | = 5.1-sp2 | No fix listed |
| bea weblogic server | = 5.1-sp3 | No fix listed |
| bea weblogic server | = 5.1-sp4 | No fix listed |
| bea weblogic server | = 5.1-sp5 | No fix listed |
| bea weblogic server | = 5.1-sp6 | No fix listed |
| bea weblogic server | = 5.1-sp7 | No fix listed |
| bea weblogic server | = 5.1-sp8 | No fix listed |
| bea weblogic server | = 5.1-sp9 | No fix listed |
| bea weblogic server | = 6.0 | No fix listed |
| bea weblogic server | = 6.0-sp1 | No fix listed |
Show 47 more
| Product | Affected versions | Fixed in |
|---|---|---|
| bea weblogic server | = 6.0-sp2 | No fix listed |
| bea weblogic server | = 6.0-sp6 | No fix listed |
| bea weblogic server | = 6.1 | No fix listed |
| bea weblogic server | = 6.1-sp1 | No fix listed |
| bea weblogic server | = 6.1-sp2 | No fix listed |
| bea weblogic server | = 6.1-sp3 | No fix listed |
| bea weblogic server | = 6.1-sp4 | No fix listed |
| bea weblogic server | = 6.1-sp5 | No fix listed |
| bea weblogic server | = 6.1-sp6 | No fix listed |
| bea weblogic server | = 6.1-sp7 | No fix listed |
| bea weblogic server | = 6.1-sp8 | No fix listed |
| bea weblogic server | = 7.0 | No fix listed |
| bea weblogic server | = 7.0-sp1 | No fix listed |
| bea weblogic server | = 7.0-sp2 | No fix listed |
| bea weblogic server | = 7.0-sp3 | No fix listed |
| bea weblogic server | = 7.0-sp4 | No fix listed |
| bea weblogic server | = 7.0-sp5 | No fix listed |
| bea weblogic server | = 7.0-sp6 | No fix listed |
| bea weblogic server | = 7.0-sp7 | No fix listed |
| bea weblogic server | = 7.0.0.1 | No fix listed |
| bea weblogic server | = 7.0.0.1-sp1 | No fix listed |
| bea weblogic server | = 7.0.0.1-sp2 | No fix listed |
| bea weblogic server | = 7.0.0.1-sp3 | No fix listed |
| bea weblogic server | = 7.0.0.1-sp4 | No fix listed |
| bea weblogic server | = 8.1 | No fix listed |
| bea weblogic server | = 8.1-sp1 | No fix listed |
| bea weblogic server | = 8.1-sp2 | No fix listed |
| bea weblogic server | = 8.1-sp3 | No fix listed |
| bea weblogic server | = 8.1-sp4 | No fix listed |
| bea weblogic server | = 8.1-sp5 | No fix listed |
| bea weblogic server | = 8.1-sp6 | No fix listed |
| bea weblogic server | = 9.0 | No fix listed |
| bea weblogic server | = 9.0-ga | No fix listed |
| bea weblogic server | = 9.0-sp1 | No fix listed |
| bea weblogic server | = 9.0-sp2 | No fix listed |
| bea weblogic server | = 9.0-sp3 | No fix listed |
| bea weblogic server | = 9.0-sp4 | No fix listed |
| bea weblogic server | = 9.0-sp5 | No fix listed |
| bea weblogic server | = 9.1 | No fix listed |
| bea weblogic server | = 9.1-ga | No fix listed |
| bea weblogic server | = 9.2 | No fix listed |
| bea weblogic server | = 9.2-mp1 | No fix listed |
| bea weblogic server | = 9.2-mp2 | No fix listed |
| bea weblogic server | = 10.0 | No fix listed |
| bea systems apache connector in weblogic server | All versions | No fix listed |
| bea systems weblogic server | = 10.0_mp1 | No fix listed |
| oracle weblogic server | <= 10.3 | No fix listed |
References
- blogs.oracle.com
- 31146 third-party-advisory vendor-advisory
- 20080717 Bea Weblogic Apache Connector BOF / Remote Denial of Service PoC mailing-list
- 20080717 Bea Weblogic Apache Connector BOF / Remote Denial of Service PoC mailing-list
- VU#716387 third-party-advisory us-government-resource
- www.oracle.com
- 30273 vdb-entry
- 1020520 vdb-entry
- ADV-2008-2145 vdb-entry
- oracle-weblogic-apacheconnector-bo(43885) vdb-entry
- support.bea.com
- 6089 exploit