Oracle Weblogic Apache Connector POST Request Buffer Overflow

This module exploits a stack based buffer overflow in the BEA Weblogic Apache plugin. The connector fails to properly handle specially crafted HTTP POST requests, resulting a buffer overflow due to the insecure usage of sprintf. Currently, this module works over Windows systems without DEP, and h...

WebLogic 10.3 mod_wl无效参数导致栈溢出

No description provided by source...

Oracle WebLogic Server mod_wl Invalid Parameter Remote Overflow (1150354)

The remote web server is using the WebLogic plug-in for Apache modwl, an Apache module included with Oracle formerly BEA WebLogic Server and used to proxy requests from an Apache HTTP server to WebLogic. The version of this plug-in on the remote host is affected by a stack buffer overflow that is...

Oracle WebLogic Server mod_wl POST Request Remote Overflow

The Apache web server running on the remote host includes a version of the WebLogic plug-in for Apache modwl that is affected by a buffer overflow. This is an Apache module included with Oracle formerly BEA WebLogic Server and used to proxy requests from an Apache HTTP server to WebLogic. A remot...

CVE-2008-3257

CVE-2008-3257 describes a stack-based buffer overflow in the Oracle WebLogic Server Apache Connector (mod_wl) that affects WebLogic Server 10.3 and earlier. The overflow occurs when handling a long HTTP version string in a POST request, allowing remote attackers to potentially execute arbitrary c...

Oracle mod_wl HTTP POST Request Remote Buffer Overflow Vulnerability

Stack-based buffer overflow in the Apache Connector modwl in Oracle WebLogic Server formerly BEA WebLogic Server 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after “POST /.jsp” in an HTTP request. Recent assessments...

Oracle mod_wl HTTP POST请求远程缓冲区溢出漏洞

BUGTRAQ ID: 30273 CNCAN ID：CNCAN-2008071803 Oracle modwl是一款Bea Weblogic的前端模块。 Oracle modwl之前称为BEA modwl不正确检查用户提交的输入数据，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可导致拒绝服务或任意代码执行攻击。 提交包含超长数据的POST请求，可触发此漏洞。精心构建提交数据可导致以应用程序权限执行任意指令。 Oracle modwl 目前没有解决方案提供： http://edocs.bea.com/wls/docs70/plugins/apache.html...