ID |
CVE-2008-5457
|
Summary |
Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. |
References |
|
Vulnerable Configurations |
-
cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*
-
cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*
-
cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*
-
cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*
-
cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:bea_product_suite:10.3:*:*:*:*:*:*:*
|
CVSS |
Base: | 10.0 (as of 23-10-2012 - 02:56) |
Impact: | |
Exploitability: | |
|
CWE |
NVD-CWE-noinfo |
CAPEC |
|
Access |
Vector | Complexity | Authentication |
NETWORK |
LOW |
NONE |
|
Impact |
Confidentiality | Integrity | Availability |
COMPLETE |
COMPLETE |
COMPLETE |
|
cvss-vector
via4
|
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
refmap
via4
|
|
saint
via4
|
bid | 33177 | description | Oracle WebLogic Server IIS Connector JSESSIONID buffer overflow | title | weblogic_iis_connector_jsessionid | type | remote |
bid | 33177 | description | Oracle Database OLAP component ODCITABLESTART buffer overflow | id | database_oracle_version | osvdb | 51347 | title | oracle_olap_odcitablestart | type | remote |
bid | 33177 | description | Oracle Secure Backup login.php ora_osb_lcookie command execution | id | database_oracle_backupver | osvdb | 51343 | title | oracle_secure_backup_login_lcookie | type | remote |
bid | 33177 | description | Oracle Secure Backup login.php rbtool command injection | id | database_oracle_backupver | osvdb | 51342 | title | oracle_secure_backup_login_rbtool | type | remote |
bid | 33177 | description | Oracle Secure Backup NDMP_CONECT_CLIENT_AUTH buffer overflow | id | database_oracle_backupndmpbo,database_oracle_backupver | osvdb | 51340 | title | oracle_secure_backup_ndmp_clientauth | type | remote |
|
Last major update |
23-10-2012 - 02:56 |
Published |
14-01-2009 - 02:30 |
Last modified |
23-10-2012 - 02:56 |