PT-2009-1284 · Oracle+2 · Bea Product Suite+3

Publicado 2009-01-14 · Atualizado 2012-10-23 · CVE-2008-5457

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite versions 7.0 SP7 through 10.3

Description The issue affects the confidentiality, integrity, and availability of the system via unknown vectors.

Recommendations For versions 7.0 SP7 through 10.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2008-5457

Produtos afetados

Apache

Bea Product Suite

Bea Weblogic Server

Iis

Referências · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/bea_weblogic_jsessionid.rb · Exploit
• 🔥 https://exploit-db.com/exploits/8336 · Exploit
• 🔥 https://exploit-db.com/exploits/16762 · Exploit
• http://vupen.com/english/advisories/2009/0115 · Nota
• http://securityfocus.com/bid/33177 · Nota
• http://securitytracker.com/id?1021571 · Nota
• http://secunia.com/advisories/33526 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5457 · Nota de Segurança
• http://oracle.com/technetwork/topics/security/cpujan2009-097901.html · Nota