Description

Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.

Remediation

References

CVE-2008-3257

Related Vulnerabilities

EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5966)

Magento Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-7889)

WordPress Plugin Latest Posts by BestWebSoft Cross-Site Scripting (0.2)

WordPress Plugin ComicPress Manager 'lang' Parameter Cross-Site Scripting (1.4.9.9)

WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.9)

Severity

Critical

Tags

Missing Update Known Vulnerabilities CWE-119 CVE-2008-3257