Oracle WebLogic Server Node Manager 'beasvc.exe' Remote Command Execution Vulnerability
BID:37926
Info
Oracle WebLogic Server Node Manager 'beasvc.exe' Remote Command Execution Vulnerability
| Bugtraq ID: | 37926 |
| Class: | Design Error |
| CVE: |
CVE-2010-0073 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 22 2010 12:00AM |
| Updated: | Apr 13 2010 09:33PM |
| Credit: | Evgeny Legerov |
| Vulnerable: |
Oracle Weblogic Server 10.3.2 Oracle Weblogic Server 10.3.1 Oracle Weblogic Server 9.2 MP3 Oracle Weblogic Server 9.2 MP2 Oracle Weblogic Server 9.2 MP1 Oracle Weblogic Server 9.2 Oracle Weblogic Server 8.1 SP6 Oracle Weblogic Server 8.1 MP6 Oracle Weblogic Server 8.1 MP4 Oracle Weblogic Server 8.1 Oracle Weblogic Server 7.0 SP7 Oracle Weblogic Server 7.0 MP5 Oracle Weblogic Server 7.0 MP4 Oracle Weblogic Server 7.0 MP2 Oracle Weblogic Server 7.0 Oracle Weblogic Server 10.3 Oracle Weblogic Server 10.0 MP2 Oracle Weblogic Server 10.0 MP1 Oracle Weblogic Server 10 |
| Not Vulnerable: | |
Exploit / POC
Oracle WebLogic Server Node Manager 'beasvc.exe' Remote Command Execution Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
References
Oracle WebLogic Server Node Manager 'beasvc.exe' Remote Command Execution Vulnerability
References:
References:
- Oracle Weblogic 10.3.2 Node Manager fun (Evgeny Legerov)
- Security Alert For CVE-2010-0073 Released (Oracle)
- WebLogic Homepage (Oracle)
- Oracle Critical Patch Update April 2010 (Oracle)
- Oracle Security Alert for CVE-2010-0073 (Oracle)