Oracle WebLogic Server Apache Connector POST buffer overflow

Added: 07/25/2008 CVE: CVE-2008-3257 BID: 30273 OSVDB: 47096 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem A buffer overflow in the Apache Connector for WebLogic Server allows remote attackers to execute arbitrary commands by sending a...

Stack overflow

Stack-based buffer overflow in the Apache Connector modwl in Oracle WebLogic Server formerly BEA WebLogic Server 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request...

CVE-2008-3257

Stack-based buffer overflow in the Apache Connector modwl in Oracle WebLogic Server formerly BEA WebLogic Server 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request...

CVE-2008-3257

CVE-2008-3257 describes a stack-based buffer overflow in the Oracle WebLogic Server Apache Connector (mod_wl) that affects WebLogic Server 10.3 and earlier. The overflow occurs when handling a long HTTP version string in a POST request, allowing remote attackers to potentially execute arbitrary c...

CVE-2008-3257

Stack-based buffer overflow in the Apache Connector modwl in Oracle WebLogic Server formerly BEA WebLogic Server 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request...

Oracle mod_wl HTTP POST Request Remote Buffer Overflow Vulnerability

Stack-based buffer overflow in the Apache Connector modwl in Oracle WebLogic Server formerly BEA WebLogic Server 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after “POST /.jsp” in an HTTP request. Recent assessments...

Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit

No description provided by source. // Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 address space randomization // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora...

Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit

Exploit for unknown platform in category remote exploits =================================================================== Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit =================================================================== // Bea Weblogic -- Apache Connector...

beaweblogic-exec.txt

// Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora Core case study" // His technique works fine against Windows 200...

Bea Weblogic Apache Connector - Code Execution Denial of Service

Bea Weblogic Apache Connector - Code Execution Denial of Service // Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora...

Bea Weblogic Apache Connector - Code Execution / Denial of Service

// Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora Core case study" // His technique works fine against Windows 200...