Added: 07/25/2008
CVE: CVE-2008-3257
BID: 30273
OSVDB: 47096
Oracle WebLogic Server (formerly BEA WebLogic Server) is a Java web application platform.
A buffer overflow in the Apache Connector for WebLogic Server allows remote attackers to execute arbitrary commands by sending a long, specially crafted POST request.
Apply a fix when available.
<http://secunia.com/advisories/31146/>
Exploit works on WebLogic Server 10.0. On Windows Server 2003, patch KB933729 (rpcrt4.dll version 5.2.3790.4115) must be installed.
Windows 2000
Windows Server 2003