PT-2009-1284 · Oracle+2 · Bea Product Suite+3

Published 2009-01-14 · Updated 2012-10-23 · CVE-2008-5457

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite versions 7.0 SP7 through 10.3

Description The issue affects the confidentiality, integrity, and availability of the system via unknown vectors.

Recommendations For versions 7.0 SP7 through 10.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2008-5457

Affected Products

Apache

Bea Product Suite

Bea Weblogic Server

Iis

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/bea_weblogic_jsessionid.rb · Exploit
• 🔥 https://exploit-db.com/exploits/8336 · Exploit
• 🔥 https://exploit-db.com/exploits/16762 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5457 · Security Note
• http://vupen.com/english/advisories/2009/0115 · Note
• http://securityfocus.com/bid/33177 · Note
• http://securitytracker.com/id?1021571 · Note
• http://secunia.com/advisories/33526 · Note
• http://oracle.com/technetwork/topics/security/cpujan2009-097901.html · Note