Secunia

KingCope has reported a vulnerability in Oracle WebLogic Server (formerly Bea WebLogic Server), which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the Apache connector (mod_weblogic) and can be exploited to cause a stack-based buffer overflow via an overly long, specially crafted POST request.

Successful exploitation may allow execution of arbitrary code.

The vulnerability affects Apache Plug-ins dated prior to July 28 2008 and on the following WebLogic Server versions:
* WebLogic Server 10.0 released through Maintenance Pack 1, on all platforms
* WebLogic Server 9.2 released through Maintenance Pack 3, on all platforms
* WebLogic Server 9.1 on all platforms
* WebLogic Server 9.0 on all platforms
* WebLogic Server 8.1 released through Service Pack 6, on all platforms
* WebLogic Server 7.0 released through Service Pack 7 on all platforms
* WebLogic Server 6.1 released through Service Pack 7 on all platforms

Solution
Install the latest web server plug-in or update to version 10.3 (please see updated BEA advisory for details).
Further details available in Customer Area

Provided and/or discovered by
KingCope

Changelog
Further details available in Customer Area

Original Advisory
Oracle:
http://www.oracle.com/technetwork/topics/security/alert-cve-2008-3257-084687.html
http://www.oracle.com/technetwork/topics/security/2793-088812.html

KingCope:
http://milw0rm.com/exploits/6089

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area