CVE

Id
38451  
CVE No.
CVE-2009-1016  
Status
Candidate  
Description
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote authenticated users to affect confidentiality, integrity, and availability, related to IIS. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow involving an unspecified Server Plug-in and a crafted SSL certificate.  
Phase
Assigned (20090319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
419634 38451 CVE-2009-1016 MISC:http://secunia.com/secunia_research/2009-23/  View
419635 38451 CVE-2009-1016 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html  View
419636 38451 CVE-2009-1016 CERT:TA09-105A  View
419637 38451 CVE-2009-1016 URL:http://www.us-cert.gov/cas/techalerts/TA09-105A.html  View
419638 38451 CVE-2009-1016 BID:34461  View
419639 38451 CVE-2009-1016 URL:http://www.securityfocus.com/bid/34461  View
419640 38451 CVE-2009-1016 SECTRACK:1022059  View
419641 38451 CVE-2009-1016 URL:http://www.securitytracker.com/id?1022059  View
419642 38451 CVE-2009-1016 XF:oracle-bea-ssl-bo(64934)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40893 JVNDB-2009-001899 Oracle Database の Network Foundation コンポーネントにおける脆弱性 Oracle Database の Network Foundation コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2009-1020 38451 9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001899.html  View