----------------------------------------------------------------------

Did you know that a change in our assessment rating, exploit code
availability, or if an updated patch is released by the vendor, is
not part of this mailing-list?

Click here to learn more:
http://secunia.com/advisories/business_solutions/

----------------------------------------------------------------------

TITLE:
Oracla BEA WebLogic Server Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA33526

VERIFY ADVISORY:
http://secunia.com/advisories/33526/

CRITICAL:
Highly critical

IMPACT:
Exposure of sensitive information, DoS, System access

WHERE:
>From remote

REVISION:
1.1 originally posted 2009-01-14

SOFTWARE:
BEA WebLogic Express 7.x
http://secunia.com/advisories/product/1282/
BEA WebLogic Express 8.x
http://secunia.com/advisories/product/1843/
BEA WebLogic Express 9.x
http://secunia.com/advisories/product/5823/
BEA WebLogic Express 10.x
http://secunia.com/advisories/product/17672/
BEA WebLogic Server 7.x
http://secunia.com/advisories/product/754/
BEA WebLogic Server 8.x
http://secunia.com/advisories/product/1360/
BEA WebLogic Server 9.x
http://secunia.com/advisories/product/5822/
BEA WebLogic Server 10.x
http://secunia.com/advisories/product/17671/

DESCRIPTION:
Some vulnerabilities have been reported in Oracle BEA WebLogic
Server, which can be exploited by malicious people to bypass certain
security restrictions, disclose potentially sensitive information,
cause a DoS (Denial of Service), and potentially compromise a
vulnerable system.

1) A boundary error exists in WebLogic plug-ins for Apache, Sun, and
IIS Web servers when processing HTTP requests and can be exploited to
cause a buffer overflow via a specially crafted HTTP request. 

This vulnerability is reported in the following versions:
* Oracle WebLogic Server 10.3
* Oracle WebLogic Server 10.0 released through MP1
* Oracle WebLogic Server 9.2 released through MP3
* Oracle WebLogic Server 9.1
* Oracle WebLogic Server 9.0
* Oracle WebLogic Server 8.1 released through SP6
* Oracle WebLogic Server 7.0 released through SP7

2) An unspecified error can result in security policies not being
enforced for web services. No further details are currently
available.

This vulnerability is reported in Oracle WebLogic Server 10.3 GA on
all platforms.

3) An unspecified error related to JSP and servlets can be exploited
to disclose potentially sensitive information. No further details are
currently available.

This vulnerability is reported in the following versions:
* Oracle WebLogic Server 10.3 GA on all platforms
* Oracle WebLogic Server 10.0 released through Maintenance Pack 1 on
all platforms
* Oracle WebLogic Server 9.2 released through Maintenance Pack 3 on
all platforms
* Oracle WebLogic Server 9.1 on all platforms
* Oracle WebLogic Server 9.0 on all platforms

4) An unspecified error exists in WebLogic Console, which can
potentially be exploited to bypass certain security restrictions. No
further details are currently available.

This vulnerability is reported in the following versions:
* Oracle WebLogic Server 10.3
* Oracle WebLogic Server 10.0 released through Maintenance Pack 1 on
all platforms
* Oracle WebLogic Server 9.2 released through Maintenance Pack 3 on
all platforms
* Oracle WebLogic Server 9.1 on all platforms
* Oracle WebLogic Server 9.0 on all platforms
* Oracle WebLogic Server 8.1 released through Service Pack 6, on all
platforms
* Oracle WebLogic Server 7.0 released through Service Pack 7, on all
platforms

SOLUTION:
Apply the patches (see vendor advisories for details).

PROVIDED AND/OR DISCOVERED BY:
1) Vulnerability Research Team, Assurent Secure Technologies

CHANGELOG:
2009-01-14: Updated vulnerability #1 in "Description" with additional
information provided by the Vulnerability Research Team of Assurent
Secure Technologies.

ORIGINAL ADVISORY:
BEA:
https://support.bea.com/application_content/product_portlets/securityadvisories/2809.html
https://support.bea.com/application_content/product_portlets/securityadvisories/2807.html
https://support.bea.com/application_content/product_portlets/securityadvisories/2810.html
https://support.bea.com/application_content/product_portlets/securityadvisories/2811.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------