Oracle WebLogic Server CVE-2009-1974 Remote Vulnerability
BID:35674
Info
Oracle WebLogic Server CVE-2009-1974 Remote Vulnerability
| Bugtraq ID: | 35674 |
| Class: | Unknown |
| CVE: |
CVE-2009-1974 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 14 2009 12:00AM |
| Updated: | Jul 14 2009 10:36PM |
| Credit: | Oracle |
| Vulnerable: |
Oracle Weblogic Server 9.2 MP3 Oracle Weblogic Server 9.1 GA Oracle Weblogic Server 9.0 GA Oracle Weblogic Server 8.1 SP6 Oracle Weblogic Server 7.0 SP7 Oracle Weblogic Server 10.3 Oracle Weblogic Server 10.0 MP1 |
| Not Vulnerable: | |
Discussion
Oracle WebLogic Server CVE-2009-1974 Remote Vulnerability
Oracle WebLogic Server is prone to a remote vulnerability that can be exploited over the 'HTTP' protocol. A successful exploit can occur if the attacker has 'Servlet Container Package' privileges.
This vulnerability affects the following supported versions:
10.3
10.0 MP1
9.2 MP3
9.1
9.0
8.1 SP6
7.0 SP7
Oracle WebLogic Server is prone to a remote vulnerability that can be exploited over the 'HTTP' protocol. A successful exploit can occur if the attacker has 'Servlet Container Package' privileges.
This vulnerability affects the following supported versions:
10.3
10.0 MP1
9.2 MP3
9.1
9.0
8.1 SP6
7.0 SP7
Exploit / POC
Oracle WebLogic Server CVE-2009-1974 Remote Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Oracle WebLogic Server CVE-2009-1974 Remote Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for details.
Solution:
Vendor updates are available. Please contact the vendor for details.
References
Oracle WebLogic Server CVE-2009-1974 Remote Vulnerability
References:
References: