virus logo Intrusion Prevention

HTTP.Header.Transfer.Encoding.Buffer.Overflow

description-logoDescription

This indicates an attack attempt against a buffer-overflow vulnerability in BEA WebLogic Server Apache plugin.
The vulnerability is caused by an error when the vulnerable software handles a transfer-encoding POST request. It allows a remote attacker to execute arbitrary code via sending a crafted HTTP request.

affected-products-logoAffected Products

BEA Product Suite 10.3
BEA Product Suite 10.0 MP1
BEA Product Suite 9.2 MP3
BEA Product Suite 9.1
BEA Product Suite 9.0
BEA Product Suite 8.1 SP6
BEA Product Suite 7.0 SP7
BEA Product Suite 6.1 SP7

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Upgrade to the latest version, available from the vendor's web site:
ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/security/WLSWebServerPlugins1.0.1150354-Apache.zip

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)
ID 15961
Created Nov 11, 2008
Updated Nov 15, 2021
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
CVE ID CVE-2008-4008
Exploit Prediction Score 97.02%
Default Action drop
Active
Affected OS Windows, Linux
Affected App Oracle