Oracle WebLogic Server Apache Connector POST buffer overflow

Added: 07/25/2008 CVE: CVE-2008-3257 BID: 30273 OSVDB: 47096 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem A buffer overflow in the Apache Connector for WebLogic Server allows remote attackers to execute arbitrary commands by sending a...

Oracle WebLogic Server Apache Connector POST buffer overflow

Added: 07/25/2008 CVE: CVE-2008-3257 BID: 30273 OSVDB: 47096 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem A buffer overflow in the Apache Connector for WebLogic Server allows remote attackers to execute arbitrary commands by sending a...

Oracle WebLogic Server Apache Connector POST buffer overflow

Added: 07/25/2008 CVE: CVE-2008-3257 BID: 30273 OSVDB: 47096 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem A buffer overflow in the Apache Connector for WebLogic Server allows remote attackers to execute arbitrary commands by sending a...

Oracle Weblogic Apache连接器POST请求远程栈溢出漏洞

BUGTRAQ ID: 30273 WebLogic包含多种应用系统集成方案，包括Server/Express/Integration等。 WebLogic的Apache连接器实现上存在漏洞，如果远程攻击者向WebLogic的Apache连接器发送了超长的POST请求的话，就可能触发栈溢出，导致执行任意指令。 Oracle WebLogic Server Oracle ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.oracle.com http://www.sebug.net/exploit/4269/...

Stack overflow

Stack-based buffer overflow in the Apache Connector modwl in Oracle WebLogic Server formerly BEA WebLogic Server 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request...

CVE-2008-3257

Stack-based buffer overflow in the Apache Connector modwl in Oracle WebLogic Server formerly BEA WebLogic Server 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request...

CVE-2008-3257

CVE-2008-3257 describes a stack-based buffer overflow in the Oracle WebLogic Server Apache Connector (mod_wl) that affects WebLogic Server 10.3 and earlier. The overflow occurs when handling a long HTTP version string in a POST request, allowing remote attackers to potentially execute arbitrary c...

CVE-2008-3257

Stack-based buffer overflow in the Apache Connector modwl in Oracle WebLogic Server formerly BEA WebLogic Server 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request...

Oracle mod_wl HTTP POST Request Remote Buffer Overflow Vulnerability

Stack-based buffer overflow in the Apache Connector modwl in Oracle WebLogic Server formerly BEA WebLogic Server 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after “POST /.jsp” in an HTTP request. Recent assessments...

HP Select Identity unauthorized access

Unauthorized access via Active Directory Bidirectional LDAP Connector...

Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit

No description provided by source. // Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 address space randomization // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora...

Design/Logic Flaw

Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-1665

Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-1665

Multiple unspecified vulnerabilities in HP Select Identity HPSI Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-1665

HP Select Identity Active Directory Bidirectional LDAP Connector vulnerable to remote arbitrary code execution in versions 2.20, 2.20.001, 2.20.002 and 2.30. The HP Security Bulletin (HPSBMA02346 rev.2) confirms a remote unauthorized access risk and provides patches (BiDir ActiveDir Connector 2.3...

Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit

Exploit for unknown platform in category remote exploits =================================================================== Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit =================================================================== // Bea Weblogic -- Apache Connector...

beaweblogic-exec.txt

// Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora Core case study" // His technique works fine against Windows 200...

HP Select Identity Bidrectional LDAP Connector远程未授权访问漏洞

BUGTRAQ ID: 30250 CVE ID：CVE-2008-1665 CNCVE ID：CNCVE-20081665 HP Select Identity是一款身份认证管理应用解决方案。 HP Select Identity Bidrectional LDAP Connector存在一个未明未授权访问漏洞，远程攻击者可以利用漏洞未授权访问目标应用系统。 目前没有详细漏洞细节提供。 HP HPSI Active Directory Bidirectional LDAP Connector 2.20.2 HP HPSI Active Directory Bidirectional...

Bea Weblogic Apache Connector - Code Execution Denial of Service

Bea Weblogic Apache Connector - Code Execution Denial of Service // Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora...

Bea Weblogic Apache Connector - Code Execution / Denial of Service

// Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora Core case study" // His technique works fine against Windows 200...