← Back

CVE-2008-3257

nvd nist
Published: Jul 22, 2008Modified: Apr 23, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.

Affected (72)

Bea
1 product
Weblogic Server
Bea Systems
2 products
Apache Connector In Weblogic Server
Weblogic Server
Oracle
1 product
Weblogic Server
Configuration A
72 vulnerable
Vulnerable SoftwareAffected Versions
Bea
Weblogic Server
Version 10.0
Weblogic Server
Version 3.1.8
Weblogic Server
Version 4.0.4
Weblogic Server
Version 4.0
Weblogic Server
Version 4.5.1
Weblogic Server
Version 4.5.1 sp15
Weblogic Server
Version 4.5.2
Weblogic Server
Version 4.5.2 sp1
Weblogic Server
Version 4.5.2 sp2
Weblogic Server
Version 4.5
Weblogic Server
Version 5.1
Weblogic Server
Version 5.1 sp10
Weblogic Server
Version 5.1 sp11
Weblogic Server
Version 5.1 sp12
Weblogic Server
Version 5.1 sp13
Weblogic Server
Version 5.1 sp1
Weblogic Server
Version 5.1 sp2
Weblogic Server
Version 5.1 sp3
Weblogic Server
Version 5.1 sp4
Weblogic Server
Version 5.1 sp5
Weblogic Server
Version 5.1 sp6
Weblogic Server
Version 5.1 sp7
Weblogic Server
Version 5.1 sp8
Weblogic Server
Version 5.1 sp9
Weblogic Server
Version 6.0
Weblogic Server
Version 6.0 sp1
Weblogic Server
Version 6.0 sp2
Weblogic Server
Version 6.0 sp6
Weblogic Server
Version 6.1
Weblogic Server
Version 6.1 sp1
Weblogic Server
Version 6.1 sp2
Weblogic Server
Version 6.1 sp3
Weblogic Server
Version 6.1 sp4
Weblogic Server
Version 6.1 sp5
Weblogic Server
Version 6.1 sp6
Weblogic Server
Version 6.1 sp7
Weblogic Server
Version 6.1 sp8
Weblogic Server
Version 7.0.0.1
Weblogic Server
Version 7.0.0.1 sp1
Weblogic Server
Version 7.0.0.1 sp2
Weblogic Server
Version 7.0.0.1 sp3
Weblogic Server
Version 7.0.0.1 sp4
Weblogic Server
Version 7.0
Weblogic Server
Version 7.0 sp1
Weblogic Server
Version 7.0 sp2
Weblogic Server
Version 7.0 sp3
Weblogic Server
Version 7.0 sp4
Weblogic Server
Version 7.0 sp5
Weblogic Server
Version 7.0 sp6
Weblogic Server
Version 7.0 sp7
Weblogic Server
Version 8.1
Weblogic Server
Version 8.1 sp1
Weblogic Server
Version 8.1 sp2
Weblogic Server
Version 8.1 sp3
Weblogic Server
Version 8.1 sp4
Weblogic Server
Version 8.1 sp5
Weblogic Server
Version 8.1 sp6
Weblogic Server
Version 9.0
Weblogic Server
Version 9.0 ga
Weblogic Server
Version 9.0 sp1
Weblogic Server
Version 9.0 sp2
Weblogic Server
Version 9.0 sp3
Weblogic Server
Version 9.0 sp4
Weblogic Server
Version 9.0 sp5
Weblogic Server
Version 9.1
Weblogic Server
Version 9.1 ga
Weblogic Server
Version 9.2
Weblogic Server
Version 9.2 mp1
Weblogic Server
Version 9.2 mp2
Apache Connector In Weblogic Server
All versions
Weblogic Server
Version 10.0_mp1
Weblogic Server
Up to 10.3

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (24)

Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.