CVE

Id
34125  
CVE No.
CVE-2008-4008  
Status
Candidate  
Description
Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a stack-based buffer overflow in the WebLogic Apache Connector, related to an invalid parameter.  
Phase
Assigned (20080909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
372768 34125 CVE-2008-4008 IDEFENSE:20081029 Oracle WebLogic Apache Connector  View
372769 34125 CVE-2008-4008 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=751  View
372770 34125 CVE-2008-4008 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html  View
372771 34125 CVE-2008-4008 VUPEN:ADV-2008-2825  View
372772 34125 CVE-2008-4008 URL:http://www.vupen.com/english/advisories/2008/2825  View
372773 34125 CVE-2008-4008 SECTRACK:1021056  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46544 JVNDB-2008-001854 BEA Product Suite の WebLogic Workshop コンポーネントにおける脆弱性 BEA Product Suite の WebLogic Workshop コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2008-4012 34125 5.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001854.html  View