CVE-2008-3257
Published Jul 22, 2008
Last updated 7 years ago
Overview
- Description
- Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-119
Vendor comments
- OracleOracle has released a workaround for CVE-2008-3257. Information is available at: http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bea:weblogic_server:3.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "742DCC2D-B4AD-4D16-8338-21E258C4FD17"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FED57A9-CD22-48C6-AF7B-C361CA843283"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:4.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E3A5C91-82C4-40B6-B8F2-C083AEF76723"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9500F620-FEFE-4CB7-A733-65E7372BD8D4"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:4.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76738B84-33DD-450B-90A2-B22B77D52857"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:4.5.1:sp15:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E951CB37-0BFA-48D3-A7FA-8B75A5FD7EB2"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:4.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABEA67C2-6CD7-49FB-9C18-B23045D272AB"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:4.5.2:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9EB3890-9D1F-4F5D-A124-ED109AD0669E"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:4.5.2:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77DF4FDA-D9FC-4B20-89BC-EF9D853644E8"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCD5D4AD-0BA3-42F7-852F-524488D74A96"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B393A66-08A6-4EBA-B01E-BB6418423F79"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2B4C4E8-2862-457F-BDCC-3F54B8F7AADE"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47974FFB-1B28-492B-9A83-78AF16CF62CC"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F27425D-1754-44AE-A4B5-F27D5FA6A052"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp13:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "034C62E6-3598-4D66-A0BD-8BD2E67048C5"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99D0A3A8-1444-4DA4-AEF3-08578482574C"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "523836A4-0110-4CD3-A81E-988A02AEA68C"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A705EB67-3961-445F-8023-F82C7618BE2B"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD698DD8-5491-4A73-A527-8C9228992A2D"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86C4679F-F13F-4A97-AE42-BC54BD0F149C"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF96A26E-7284-43A0-BD6A-907E1029197D"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8479B6C-464F-41BC-BF81-31EA74CEF4D2"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:5.1:sp9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B08241CF-0F3D-44E2-8D72-4F98413933EC"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDE9282D-C32F-4D2F-81BE-75E447925A23"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E6644EF-C875-4005-A628-0AED7B7BB94F"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.0:sp6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "703482E8-35A9-4A9F-A9FD-B0F8CEA4A404"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63017BF8-D681-45EC-9C31-09D029F1126D"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E0B1791-974A-4967-8CF9-33BE8183200B"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B12A8B1-F78E-46B3-8872-4C6484345477"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B091903-943F-4822-9F24-9D109B2D76A4"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:6.1:sp8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B2BD55C-15DE-4D7B-9B5A-21016B7E2A39"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6828CE4B-91E8-4688-977F-DC7BC21131C8"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D34E2925-DE2A-437F-B349-BD7103F4C37E"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16E3F943-D920-4C0A-8545-5CF7D792011F"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B46A3EBE-B268-427E-AAB5-62DDF255F1D1"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5D61A68-E83A-4374-832A-C9A2FEA0AD6C"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32E8797D-1B62-4480-A79D-0345E65699E8"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FC1486C-6AC4-44F7-9015-40FD4A341C38"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5485722F-5DE4-4CD4-865F-32585537F523"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CCEDE54-97F3-457A-9886-5BD91C9AED2B"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E08D4CEA-9ACC-4869-BC87-3524A059914F"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9429D939-FCC4-4BA7-90C4-BBEECE7309D0"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0653ACAC-B0D9-4381-AB23-11D24852A414"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A75A7F9-A99A-4C8E-9867-71FA8A55DD70"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CA97F1A-49F7-4511-8959-D62155491DF5"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.0:ga:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98F632B9-0572-4563-BA41-262628A5CB7A"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.0:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E758AF8B-B47F-4CE7-B73E-3638180C9D79"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.0:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AC47FAA-AB16-4728-AE0B-C0C90861D809"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.0:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10E284B8-4EBE-459D-87BA-401BC2AE29C5"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.0:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F588A56-E4CB-44A4-A4D3-BFA89D1C6BD6"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.0:sp5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05E4CCAC-8E99-49DE-8E90-18F5C03BBC94"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.1:ga:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A585B339-442B-4408-9A44-E872FF4406A8"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.2:mp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "321BC193-5FBF-4F25-996D-1FE74779F34D"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:9.2:mp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E23EB6FE-EA07-426F-9781-87630BC76FB3"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60F9ABCC-5217-4650-8C71-F8B0EB86789F"
},
{
"criteria": "cpe:2.3:a:bea_systems:apache_connector_in_weblogic_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6471A8E2-13B4-4506-89D0-86526394FD4B"
},
{
"criteria": "cpe:2.3:a:bea_systems:weblogic_server:10.0_mp1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D4B4A86-A381-4DB1-AA9D-57DBEC2466CF"
},
{
"criteria": "cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40A16573-91F2-42AA-8201-AE2D5962C4E6",
"versionEndIncluding": "10.3"
}
],
"operator": "OR"
}
]
}
]