CVE-2008-2579
Summary
| CVE | CVE-2008-2579 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-07-15 23:41:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 has unknown impact and remote attack vectors. |
Risk And Classification
Primary CVSS: v2.0 7.5 from [email protected]
AV:N/AC:L/Au:N/C:P/I:P/A:P
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Weblogic Server | 10.0 | - | All | All |
| Application | Oracle | Weblogic Server | 10.0 | - | All | All |
| Application | Oracle | Weblogic Server | 10.0 | - | All | All |
| Application | Oracle | Weblogic Server | 10.0 | maintenance_pack1 | All | All |
| Application | Oracle | Weblogic Server | 10.0 | maintenance_pack1 | All | All |
| Application | Oracle | Weblogic Server | 10.0 | maintenance_pack1 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | - | All | All |
| Application | Oracle | Weblogic Server | 6.1 | - | All | All |
| Application | Oracle | Weblogic Server | 6.1 | - | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp1 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp1 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp1 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp2 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp2 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp2 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp3 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp3 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp3 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp4 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp4 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp4 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp5 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp5 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp5 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp6 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp6 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp6 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp7 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp7 | All | All |
| Application | Oracle | Weblogic Server | 6.1 | sp7 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | - | All | All |
| Application | Oracle | Weblogic Server | 7.0 | - | All | All |
| Application | Oracle | Weblogic Server | 7.0 | - | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp1 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp1 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp1 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp2 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp2 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp2 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp3 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp3 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp3 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp4 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp4 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp4 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp5 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp5 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp5 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp6 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp6 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp6 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp7 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp7 | All | All |
| Application | Oracle | Weblogic Server | 7.0 | sp7 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | - | All | All |
| Application | Oracle | Weblogic Server | 8.1 | - | All | All |
| Application | Oracle | Weblogic Server | 8.1 | - | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp1 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp1 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp1 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp2 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp2 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp2 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp3 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp3 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp3 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp4 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp4 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp4 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp5 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp5 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp5 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp6 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp6 | All | All |
| Application | Oracle | Weblogic Server | 8.1 | sp6 | All | All |
| Application | Oracle | Weblogic Server | 9.0 | - | All | All |
| Application | Oracle | Weblogic Server | 9.0 | - | All | All |
| Application | Oracle | Weblogic Server | 9.0 | - | All | All |
| Application | Oracle | Weblogic Server | 9.0 | maintenance_pack3 | All | All |
| Application | Oracle | Weblogic Server | 9.0 | maintenance_pack3 | All | All |
| Application | Oracle | Weblogic Server | 9.0 | maintenance_pack3 | All | All |
| Application | Oracle | Weblogic Server | 9.1 | - | All | All |
| Application | Oracle | Weblogic Server | 9.1 | - | All | All |
| Application | Oracle | Weblogic Server | 9.1 | - | All | All |
| Application | Oracle | Weblogic Server | 9.1 | maintenance_pack3 | All | All |
| Application | Oracle | Weblogic Server | 9.1 | maintenance_pack3 | All | All |
| Application | Oracle | Weblogic Server | 9.1 | maintenance_pack3 | All | All |
| Application | Oracle | Weblogic Server | 9.2 | - | All | All |
| Application | Oracle | Weblogic Server | 9.2 | - | All | All |
| Application | Oracle | Weblogic Server | 9.2 | - | All | All |
| Application | Oracle | Weblogic Server | 9.2 | maintenance_pack1 | All | All |
| Application | Oracle | Weblogic Server | 9.2 | maintenance_pack1 | All | All |
| Application | Oracle | Weblogic Server | 9.2 | maintenance_pack1 | All | All |
| Application | Oracle | Weblogic Server | 9.2 | maintenance_pack2 | All | All |
| Application | Oracle | Weblogic Server | 9.2 | maintenance_pack2 | All | All |
| Application | Oracle | Weblogic Server | 9.2 | maintenance_pack2 | All | All |
| Application | Oracle | Weblogic Server | 9.2 | maintenance_pack3 | All | All |
| Application | Oracle | Weblogic Server | 9.2 | maintenance_pack3 | All | All |
| Application | Oracle | Weblogic Server | 9.2 | maintenance_pack3 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Third Party Advisory |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | Third Party Advisory, VDB Entry |
| Oracle Critical Patch Update Advisory - July 2008 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Broken Link |
| SecurityTracker.com Archives - Oracle WebLogic Server Bugs Let Remote Users Access and Modify Data and Cause Denial of Service Conditions | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | Third Party Advisory, VDB Entry |
| jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000040.html | af854a3a-2127-422b-91ae-364da2661108 | jvndb.jvn.jp | Third Party Advisory, VDB Entry |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Third Party Advisory |
| JVN#81667751 Directory traversal vulnerability in WebLogic Server and WebLogic Express plug-ins | af854a3a-2127-422b-91ae-364da2661108 | jvn.jp | Third Party Advisory |
| HPSBMA02133 SSRT061201 rev.9 - HP Oracle for OpenView (OfO) Critical Patch Update - c00727143 - HP Business Support Center | af854a3a-2127-422b-91ae-364da2661108 | h20000.www2.hp.com | Broken Link |
| Oracle Products Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Third Party Advisory |
| HP Oracle for OpenView Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.