NVD

Id
48322  
Name
CVE-2009-1012  
Description
Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP3, 10.0 Gold through MP1, and 10.3 allows remote attackers to affect confidentiality, integrity, and availability. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in an unspecified plug-in that parses HTTP requests, which leads to a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-15  
Modified Date
2012-10-22  
Seq
2009-1012  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242988 48322 CVE-2009-1012 http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html  View
242989 48322 CVE-2009-1012 http://www.oracle.com/technology/deploy/security/wls-security/1012.html  View
242990 48322 CVE-2009-1012 34461  View
242991 48322 CVE-2009-1012 1022059  View
242992 48322 CVE-2009-1012 TA09-105A  View
242993 48322 CVE-2009-1012 oracle-bea-http-bo(64935)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40241 JVNDB-2009-001247 BEA Product Suite の Apache 用プラグインおよび IIS ウェブサーバにおける脆弱性 BEA Product Suite の Oracle WebLogic Server コンポーネントにおける Apache および IIS ウェブサーバ用プラグインには、機密性、完全性および可用性に影響のある脆弱性が存在します。 CVE-2009-1012 38443 CVE-2009-1012 48322 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001247.html 2009-04-15 2009-05-22 View