BEA WebLogic Server Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information

Vulnerability Information

Vulnerability Scanning

Community

Blog

Corporate Information

Home > Vulnerability Information > Secunia Advisories > BEA WebLogic Server Multiple Vulnerabilities

Secunia Advisories

Advisories

Advisories by Product

Business Solutions Restricted

Partner Solutions Restricted

About

BEA WebLogic Server Multiple Vulnerabilities

Secunia Advisory:

SA32301

Advisory Toolbox:

Issue ticket

Save in to-do list

Mark as handled

Exploit information

Download as PDF

Review actions

Add comment

Release Date:

2008-10-15

Last Update:

2008-11-03

Popularity:

5,337 views

Critical:

Highly critical

Impact:

Security Bypass
DoS
System access

Where:

From remote

Solution Status:

Vendor Patch

Software:

BEA WebLogic Server 10.x
BEA WebLogic Server 6.x
BEA WebLogic Server 7.x
BEA WebLogic Server 8.x
BEA WebLogic Server 9.x

Secunia CVSS-2 Score:

Available in Secunia business solutions

Subscribe:

Instant alerts on relevant vulnerabilities

Advisory Content (Page 2 of 3)

[ 1 ] [ 2 ] [ 3 ]

Secunia is hiring, read about the open positions here!

Solution:
Apply the patches (see vendor's advisory for details).

Provided and/or discovered by:
1) Sean Larsson and Joshua J. Drake, iDefense Labs
2, 3) Reported by the vendor.

Changelog:
2008-11-03: Added additional details for vulnerability #1. Updated credits and the "Original Advisory" section.

Original Advisory:
Oracle:
https://support.bea.com/application_c...portlets/securityadvisories/2806.html
https://support.bea.com/application_c...portlets/securityadvisories/2804.html
https://support.bea.com/application_c...portlets/securityadvisories/2801.html

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=751

Change Page:
[ 1 ] [ 2 ] [ 3 ]

Track this Secunia Advisory

Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory

Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	8
New vulnerabilities:	26
Updated advisories:	9

Highly // 37 views

IIPImage Server Buffer Overflow Vulnerabilities

Highly // 79 views

DAZ Studio File Association Security Issue

Moderately // 91 views

Sun Management Center XML Library Multiple Vulnerabilities

Less // 97 views

Debian update for request-tracker

Less // 100 views

Sun Solaris GNU tar Archive Parsing Vulnerabilities

Highly // 207 views

Apple Mac OS X update for Java

Moderately // 103 views

Sun Solaris libexpat Library XML Parsing Denial of Service

Moderately // 119 views

Sun Solaris wget SSL Certificate NULL Character Processing Vulnerability

3rd Dec, 2009

New advisories:	17
New vulnerabilities:	32
Updated advisories:	25

Less // 304 views

Joomla Kide Shoutbox Component Security Bypass

Moderately // 273 views

transfig ".fig" File Parsing Buffer Overflow

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.