CVE-2008-3257
Vulnerability from cvelistv5
Published
2008-07-22 16:00
Modified
2024-08-07 09:28
Severity ?
Summary
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
References
cve@mitre.orghttp://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html
cve@mitre.orghttp://secunia.com/advisories/31146Vendor Advisory
cve@mitre.orghttp://www.attrition.org/pipermail/vim/2008-July/002035.html
cve@mitre.orghttp://www.attrition.org/pipermail/vim/2008-July/002036.html
cve@mitre.orghttp://www.kb.cert.org/vuls/id/716387US Government Resource
cve@mitre.orghttp://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html
cve@mitre.orghttp://www.securityfocus.com/bid/30273
cve@mitre.orghttp://www.securitytracker.com/id?1020520
cve@mitre.orghttp://www.vupen.com/english/advisories/2008/2145/references
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/43885
cve@mitre.orghttps://support.bea.com/application_content/product_portlets/securityadvisories/2793.html
cve@mitre.orghttps://www.exploit-db.com/exploits/6089
af854a3a-2127-422b-91ae-364da2661108http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/31146Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.attrition.org/pipermail/vim/2008-July/002035.html
af854a3a-2127-422b-91ae-364da2661108http://www.attrition.org/pipermail/vim/2008-July/002036.html
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/716387US Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/30273
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1020520
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2008/2145/references
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/43885
af854a3a-2127-422b-91ae-364da2661108https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html
af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/6089
Impacted products
Vendor Product Version
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:28:41.938Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20080717 Bea Weblogic Apache Connector BOF / Remote Denial of Service PoC",
            "tags": [
              "mailing-list",
              "x_refsource_VIM",
              "x_transferred"
            ],
            "url": "http://www.attrition.org/pipermail/vim/2008-July/002035.html"
          },
          {
            "name": "20080717 Bea Weblogic Apache Connector BOF / Remote Denial of Service PoC",
            "tags": [
              "mailing-list",
              "x_refsource_VIM",
              "x_transferred"
            ],
            "url": "http://www.attrition.org/pipermail/vim/2008-July/002036.html"
          },
          {
            "name": "6089",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/6089"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html"
          },
          {
            "name": "31146",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31146"
          },
          {
            "name": "30273",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/30273"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html"
          },
          {
            "name": "1020520",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1020520"
          },
          {
            "name": "oracle-weblogic-apacheconnector-bo(43885)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43885"
          },
          {
            "name": "VU#716387",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/716387"
          },
          {
            "name": "ADV-2008-2145",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2145/references"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after \"POST /.jsp\" in an HTTP request."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20080717 Bea Weblogic Apache Connector BOF / Remote Denial of Service PoC",
          "tags": [
            "mailing-list",
            "x_refsource_VIM"
          ],
          "url": "http://www.attrition.org/pipermail/vim/2008-July/002035.html"
        },
        {
          "name": "20080717 Bea Weblogic Apache Connector BOF / Remote Denial of Service PoC",
          "tags": [
            "mailing-list",
            "x_refsource_VIM"
          ],
          "url": "http://www.attrition.org/pipermail/vim/2008-July/002036.html"
        },
        {
          "name": "6089",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/6089"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html"
        },
        {
          "name": "31146",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31146"
        },
        {
          "name": "30273",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/30273"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html"
        },
        {
          "name": "1020520",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1020520"
        },
        {
          "name": "oracle-weblogic-apacheconnector-bo(43885)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43885"
        },
        {
          "name": "VU#716387",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/716387"
        },
        {
          "name": "ADV-2008-2145",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2145/references"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-3257",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after \"POST /.jsp\" in an HTTP request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20080717 Bea Weblogic Apache Connector BOF / Remote Denial of Service PoC",
              "refsource": "VIM",
              "url": "http://www.attrition.org/pipermail/vim/2008-July/002035.html"
            },
            {
              "name": "20080717 Bea Weblogic Apache Connector BOF / Remote Denial of Service PoC",
              "refsource": "VIM",
              "url": "http://www.attrition.org/pipermail/vim/2008-July/002036.html"
            },
            {
              "name": "6089",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/6089"
            },
            {
              "name": "http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html"
            },
            {
              "name": "https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html",
              "refsource": "CONFIRM",
              "url": "https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html"
            },
            {
              "name": "31146",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31146"
            },
            {
              "name": "30273",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/30273"
            },
            {
              "name": "http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html",
              "refsource": "CONFIRM",
              "url": "http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html"
            },
            {
              "name": "1020520",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1020520"
            },
            {
              "name": "oracle-weblogic-apacheconnector-bo(43885)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43885"
            },
            {
              "name": "VU#716387",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/716387"
            },
            {
              "name": "ADV-2008-2145",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2145/references"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-3257",
    "datePublished": "2008-07-22T16:00:00",
    "dateReserved": "2008-07-22T00:00:00",
    "dateUpdated": "2024-08-07T09:28:41.938Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:3.1.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"742DCC2D-B4AD-4D16-8338-21E258C4FD17\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3FED57A9-CD22-48C6-AF7B-C361CA843283\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:4.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6E3A5C91-82C4-40B6-B8F2-C083AEF76723\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:4.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9500F620-FEFE-4CB7-A733-65E7372BD8D4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:4.5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"76738B84-33DD-450B-90A2-B22B77D52857\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:4.5.1:sp15:*:*:*:*:*:*\", \"matchCriteriaId\": \"E951CB37-0BFA-48D3-A7FA-8B75A5FD7EB2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:4.5.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ABEA67C2-6CD7-49FB-9C18-B23045D272AB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:4.5.2:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"F9EB3890-9D1F-4F5D-A124-ED109AD0669E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:4.5.2:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"77DF4FDA-D9FC-4B20-89BC-EF9D853644E8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CCD5D4AD-0BA3-42F7-852F-524488D74A96\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B393A66-08A6-4EBA-B01E-BB6418423F79\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp10:*:*:*:*:*:*\", \"matchCriteriaId\": \"B2B4C4E8-2862-457F-BDCC-3F54B8F7AADE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp11:*:*:*:*:*:*\", \"matchCriteriaId\": \"47974FFB-1B28-492B-9A83-78AF16CF62CC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp12:*:*:*:*:*:*\", \"matchCriteriaId\": \"6F27425D-1754-44AE-A4B5-F27D5FA6A052\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp13:*:*:*:*:*:*\", \"matchCriteriaId\": \"034C62E6-3598-4D66-A0BD-8BD2E67048C5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"99D0A3A8-1444-4DA4-AEF3-08578482574C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp3:*:*:*:*:*:*\", \"matchCriteriaId\": \"523836A4-0110-4CD3-A81E-988A02AEA68C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp4:*:*:*:*:*:*\", \"matchCriteriaId\": \"A705EB67-3961-445F-8023-F82C7618BE2B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp5:*:*:*:*:*:*\", \"matchCriteriaId\": \"BD698DD8-5491-4A73-A527-8C9228992A2D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp6:*:*:*:*:*:*\", \"matchCriteriaId\": \"86C4679F-F13F-4A97-AE42-BC54BD0F149C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp7:*:*:*:*:*:*\", \"matchCriteriaId\": \"EF96A26E-7284-43A0-BD6A-907E1029197D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp8:*:*:*:*:*:*\", \"matchCriteriaId\": \"C8479B6C-464F-41BC-BF81-31EA74CEF4D2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:5.1:sp9:*:*:*:*:*:*\", \"matchCriteriaId\": \"B08241CF-0F3D-44E2-8D72-4F98413933EC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"BDE9282D-C32F-4D2F-81BE-75E447925A23\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"3E6644EF-C875-4005-A628-0AED7B7BB94F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.0:sp6:*:*:*:*:*:*\", \"matchCriteriaId\": \"703482E8-35A9-4A9F-A9FD-B0F8CEA4A404\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"63017BF8-D681-45EC-9C31-09D029F1126D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*\", \"matchCriteriaId\": \"8E0B1791-974A-4967-8CF9-33BE8183200B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*\", \"matchCriteriaId\": \"7B12A8B1-F78E-46B3-8872-4C6484345477\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*\", \"matchCriteriaId\": \"CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*\", \"matchCriteriaId\": \"6B091903-943F-4822-9F24-9D109B2D76A4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*\", \"matchCriteriaId\": \"C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:6.1:sp8:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B2BD55C-15DE-4D7B-9B5A-21016B7E2A39\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F9C5AFCF-79D8-4005-B800-B0C6BD461276\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"6828CE4B-91E8-4688-977F-DC7BC21131C8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*\", \"matchCriteriaId\": \"893D9D88-43C4-4F9F-A364-0585DE6FA9E9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*\", \"matchCriteriaId\": \"D34E2925-DE2A-437F-B349-BD7103F4C37E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*\", \"matchCriteriaId\": \"16E3F943-D920-4C0A-8545-5CF7D792011F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*\", \"matchCriteriaId\": \"B46A3EBE-B268-427E-AAB5-62DDF255F1D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*\", \"matchCriteriaId\": \"F5D61A68-E83A-4374-832A-C9A2FEA0AD6C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"32E8797D-1B62-4480-A79D-0345E65699E8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"2FC1486C-6AC4-44F7-9015-40FD4A341C38\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*\", \"matchCriteriaId\": \"5485722F-5DE4-4CD4-865F-32585537F523\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*\", \"matchCriteriaId\": \"3CCEDE54-97F3-457A-9886-5BD91C9AED2B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E08D4CEA-9ACC-4869-BC87-3524A059914F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"6F5B2A06-CE19-4A57-9566-09FC1E259CDB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"D18E22CC-A0FC-4BC7-AD39-2645F57486C1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*\", \"matchCriteriaId\": \"9429D939-FCC4-4BA7-90C4-BBEECE7309D0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*\", \"matchCriteriaId\": \"0653ACAC-B0D9-4381-AB23-11D24852A414\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*\", \"matchCriteriaId\": \"2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:8.1:sp6:*:*:*:*:*:*\", \"matchCriteriaId\": \"7A75A7F9-A99A-4C8E-9867-71FA8A55DD70\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3CA97F1A-49F7-4511-8959-D62155491DF5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:9.0:ga:*:*:*:*:*:*\", \"matchCriteriaId\": \"98F632B9-0572-4563-BA41-262628A5CB7A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:9.0:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"E758AF8B-B47F-4CE7-B73E-3638180C9D79\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:9.0:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"6AC47FAA-AB16-4728-AE0B-C0C90861D809\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:9.0:sp3:*:*:*:*:*:*\", \"matchCriteriaId\": \"10E284B8-4EBE-459D-87BA-401BC2AE29C5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:9.0:sp4:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F588A56-E4CB-44A4-A4D3-BFA89D1C6BD6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:9.0:sp5:*:*:*:*:*:*\", \"matchCriteriaId\": \"05E4CCAC-8E99-49DE-8E90-18F5C03BBC94\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:9.1:ga:*:*:*:*:*:*\", \"matchCriteriaId\": \"A585B339-442B-4408-9A44-E872FF4406A8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:9.2:mp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"321BC193-5FBF-4F25-996D-1FE74779F34D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:9.2:mp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"E23EB6FE-EA07-426F-9781-87630BC76FB3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"60F9ABCC-5217-4650-8C71-F8B0EB86789F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea_systems:apache_connector_in_weblogic_server:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6471A8E2-13B4-4506-89D0-86526394FD4B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bea_systems:weblogic_server:10.0_mp1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5D4B4A86-A381-4DB1-AA9D-57DBEC2466CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"10.3\", \"matchCriteriaId\": \"40A16573-91F2-42AA-8201-AE2D5962C4E6\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after \\\"POST /.jsp\\\" in an HTTP request.\"}, {\"lang\": \"es\", \"value\": \"Desbordamiento de b\\u00fafer basado en pila en Apache Connector (mod_wl) en Oracle WebLogic Server (anteriormente BEA Weblogic Server) 10.3 y anteriores, permite a atacantes remotos ejecutar c\\u00f3digo de su elecci\\u00f3n a trav\\u00e9s de una cadena larga HTTP, como se ha demostrado mediante una cadena despu\\u00e9s del \\\"POST /.jsp\\\" en una petici\\u00f3n HTTP. NOTA: es probable que esta vulnerabilidad se solape con el CVE-2008-2579 u otra vulnerabilidad revelada en los avisos de Oracle CPUJul2008.\"}]",
      "id": "CVE-2008-3257",
      "lastModified": "2024-11-21T00:48:49.360",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:C/I:C/A:C\", \"baseScore\": 10.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2008-07-22T16:41:00.000",
      "references": "[{\"url\": \"http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/31146\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.attrition.org/pipermail/vim/2008-July/002035.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.attrition.org/pipermail/vim/2008-July/002036.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.kb.cert.org/vuls/id/716387\", \"source\": \"cve@mitre.org\", \"tags\": [\"US Government Resource\"]}, {\"url\": \"http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/30273\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securitytracker.com/id?1020520\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.vupen.com/english/advisories/2008/2145/references\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/43885\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.exploit-db.com/exploits/6089\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/31146\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.attrition.org/pipermail/vim/2008-July/002035.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.attrition.org/pipermail/vim/2008-July/002036.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.kb.cert.org/vuls/id/716387\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"US Government Resource\"]}, {\"url\": \"http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/30273\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id?1020520\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.vupen.com/english/advisories/2008/2145/references\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/43885\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.exploit-db.com/exploits/6089\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cve@mitre.org",
      "vendorComments": "[{\"organization\": \"Oracle\", \"comment\": \"Oracle has released a workaround for CVE-2008-3257.  Information is available at:\\n\\nhttp://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html\", \"lastModified\": \"2008-07-31T00:00:00\"}]",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2008-3257\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2008-07-22T16:41:00.000\",\"lastModified\":\"2024-11-21T00:48:49.360\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after \\\"POST /.jsp\\\" in an HTTP request.\"},{\"lang\":\"es\",\"value\":\"Desbordamiento de b\u00fafer basado en pila en Apache Connector (mod_wl) en Oracle WebLogic Server (anteriormente BEA Weblogic Server) 10.3 y anteriores, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de una cadena larga HTTP, como se ha demostrado mediante una cadena despu\u00e9s del \\\"POST /.jsp\\\" en una petici\u00f3n HTTP. NOTA: es probable que esta vulnerabilidad se solape con el CVE-2008-2579 u otra vulnerabilidad revelada en los avisos de Oracle CPUJul2008.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:3.1.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"742DCC2D-B4AD-4D16-8338-21E258C4FD17\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FED57A9-CD22-48C6-AF7B-C361CA843283\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:4.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E3A5C91-82C4-40B6-B8F2-C083AEF76723\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:4.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9500F620-FEFE-4CB7-A733-65E7372BD8D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:4.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76738B84-33DD-450B-90A2-B22B77D52857\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:4.5.1:sp15:*:*:*:*:*:*\",\"matchCriteriaId\":\"E951CB37-0BFA-48D3-A7FA-8B75A5FD7EB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:4.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABEA67C2-6CD7-49FB-9C18-B23045D272AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:4.5.2:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9EB3890-9D1F-4F5D-A124-ED109AD0669E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:4.5.2:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"77DF4FDA-D9FC-4B20-89BC-EF9D853644E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCD5D4AD-0BA3-42F7-852F-524488D74A96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B393A66-08A6-4EBA-B01E-BB6418423F79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp10:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2B4C4E8-2862-457F-BDCC-3F54B8F7AADE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp11:*:*:*:*:*:*\",\"matchCriteriaId\":\"47974FFB-1B28-492B-9A83-78AF16CF62CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp12:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F27425D-1754-44AE-A4B5-F27D5FA6A052\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp13:*:*:*:*:*:*\",\"matchCriteriaId\":\"034C62E6-3598-4D66-A0BD-8BD2E67048C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"99D0A3A8-1444-4DA4-AEF3-08578482574C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"523836A4-0110-4CD3-A81E-988A02AEA68C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp4:*:*:*:*:*:*\",\"matchCriteriaId\":\"A705EB67-3961-445F-8023-F82C7618BE2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp5:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD698DD8-5491-4A73-A527-8C9228992A2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp6:*:*:*:*:*:*\",\"matchCriteriaId\":\"86C4679F-F13F-4A97-AE42-BC54BD0F149C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp7:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF96A26E-7284-43A0-BD6A-907E1029197D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp8:*:*:*:*:*:*\",\"matchCriteriaId\":\"C8479B6C-464F-41BC-BF81-31EA74CEF4D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:5.1:sp9:*:*:*:*:*:*\",\"matchCriteriaId\":\"B08241CF-0F3D-44E2-8D72-4F98413933EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"BDE9282D-C32F-4D2F-81BE-75E447925A23\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E6644EF-C875-4005-A628-0AED7B7BB94F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.0:sp6:*:*:*:*:*:*\",\"matchCriteriaId\":\"703482E8-35A9-4A9F-A9FD-B0F8CEA4A404\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"63017BF8-D681-45EC-9C31-09D029F1126D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E0B1791-974A-4967-8CF9-33BE8183200B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B12A8B1-F78E-46B3-8872-4C6484345477\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B091903-943F-4822-9F24-9D109B2D76A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4DACAC1-ABEC-4310-A0FF-B69EF9BCF273\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:6.1:sp8:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B2BD55C-15DE-4D7B-9B5A-21016B7E2A39\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9C5AFCF-79D8-4005-B800-B0C6BD461276\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6828CE4B-91E8-4688-977F-DC7BC21131C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"893D9D88-43C4-4F9F-A364-0585DE6FA9E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*\",\"matchCriteriaId\":\"D34E2925-DE2A-437F-B349-BD7103F4C37E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*\",\"matchCriteriaId\":\"16E3F943-D920-4C0A-8545-5CF7D792011F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*\",\"matchCriteriaId\":\"B46A3EBE-B268-427E-AAB5-62DDF255F1D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*\",\"matchCriteriaId\":\"F5D61A68-E83A-4374-832A-C9A2FEA0AD6C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"32E8797D-1B62-4480-A79D-0345E65699E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"2FC1486C-6AC4-44F7-9015-40FD4A341C38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"5485722F-5DE4-4CD4-865F-32585537F523\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CCEDE54-97F3-457A-9886-5BD91C9AED2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E08D4CEA-9ACC-4869-BC87-3524A059914F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F5B2A06-CE19-4A57-9566-09FC1E259CDB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D18E22CC-A0FC-4BC7-AD39-2645F57486C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"9429D939-FCC4-4BA7-90C4-BBEECE7309D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*\",\"matchCriteriaId\":\"0653ACAC-B0D9-4381-AB23-11D24852A414\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A489A8E-D3AE-42DF-8DCF-5A9EF10778FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:8.1:sp6:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A75A7F9-A99A-4C8E-9867-71FA8A55DD70\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CA97F1A-49F7-4511-8959-D62155491DF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:9.0:ga:*:*:*:*:*:*\",\"matchCriteriaId\":\"98F632B9-0572-4563-BA41-262628A5CB7A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:9.0:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E758AF8B-B47F-4CE7-B73E-3638180C9D79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:9.0:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"6AC47FAA-AB16-4728-AE0B-C0C90861D809\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:9.0:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"10E284B8-4EBE-459D-87BA-401BC2AE29C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:9.0:sp4:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F588A56-E4CB-44A4-A4D3-BFA89D1C6BD6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:9.0:sp5:*:*:*:*:*:*\",\"matchCriteriaId\":\"05E4CCAC-8E99-49DE-8E90-18F5C03BBC94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCAAE8F1-CB25-4871-BE48-ABF7DFAD8AD6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:9.1:ga:*:*:*:*:*:*\",\"matchCriteriaId\":\"A585B339-442B-4408-9A44-E872FF4406A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:9.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BA8C449-ECD0-46E5-A7D6-740DE8DEE0EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:9.2:mp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"321BC193-5FBF-4F25-996D-1FE74779F34D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:9.2:mp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"E23EB6FE-EA07-426F-9781-87630BC76FB3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea:weblogic_server:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60F9ABCC-5217-4650-8C71-F8B0EB86789F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea_systems:apache_connector_in_weblogic_server:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6471A8E2-13B4-4506-89D0-86526394FD4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bea_systems:weblogic_server:10.0_mp1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D4B4A86-A381-4DB1-AA9D-57DBEC2466CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"10.3\",\"matchCriteriaId\":\"40A16573-91F2-42AA-8201-AE2D5962C4E6\"}]}]}],\"references\":[{\"url\":\"http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/31146\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.attrition.org/pipermail/vim/2008-July/002035.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.attrition.org/pipermail/vim/2008-July/002036.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.kb.cert.org/vuls/id/716387\",\"source\":\"cve@mitre.org\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/30273\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securitytracker.com/id?1020520\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vupen.com/english/advisories/2008/2145/references\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/43885\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.exploit-db.com/exploits/6089\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/31146\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.attrition.org/pipermail/vim/2008-July/002035.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.attrition.org/pipermail/vim/2008-July/002036.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.kb.cert.org/vuls/id/716387\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/30273\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id?1020520\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2008/2145/references\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/43885\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.exploit-db.com/exploits/6089\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}],\"vendorComments\":[{\"organization\":\"Oracle\",\"comment\":\"Oracle has released a workaround for CVE-2008-3257.  Information is available at:\\n\\nhttp://www.oracle.com/technology/deploy/security/alerts/alert_cve2008-3257.html\",\"lastModified\":\"2008-07-31T00:00:00\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.