← Database

CVE-2008-3257

CRITICAL CVSS: 10.0 Published: 2008-07-22 Modified: 2026-06-16

Description

Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.

Affected Platforms

Bea Weblogic ServerBea Systems Apache Connector In Weblogic ServerOracle Weblogic ServerBea Systems Weblogic Server

Weakness Type

CWE-119

References