WebLogic Proxy Plugin Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1019450
|
|
SecurityTracker URL: http://securitytracker.com/id?1019450
|
|
CVE Reference: CVE-2008-0903
(Links to External Site)
|
Updated: Mar 14 2008
|
Original Entry Date: Feb 20 2008
|
Impact: Denial of service via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: BEA Security Advisory
|
Version(s): Plug-ins dated prior to November 2007
|
Description: A vulnerability was reported in WebLogic Server and WebLogic Express. A remote user can cause the web service to crash.
A remote user can send a specially crafted request to cause the BEA proxy plugin to crash the target Sun, IIS, or Apache web server process.
Plug-ins dated prior to November 2007 are affected.
|
Impact: A remote user can cause the web service to crash.
|
Solution: The vendor has issued a fixed plugin, available at:
ftp://anonymous:dev2dev%40bea.com@ftpna.bea.com/pub/releases/security/WLSWebServerPlugins1.0.1014998.zip
The
vendor's advisory is available at:
http://dev2dev.bea.com/pub/advisory/275
|
Vendor URL: dev2dev.bea.com/pub/advisory/275 (Links to External Site)
|
Cause: Exception handling error
|
Underlying OS: Linux (Red Hat Enterprise), Linux (SuSE), UNIX (AIX), UNIX (HP/UX), UNIX (Solaris - SunOS), Windows (NT), Windows (2000), Windows (2003)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Wed, 20 Feb 2008 01:14:45 -0500
Subject: http://dev2dev.bea.com/pub/advisory/275
|
[Original Message Not Available for Viewing]
|
|
