First published: Fri Feb 22 2008(Updated: )
Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service (web server crash) via a crafted URL.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
BEA WebLogic Express | <=10.0 | |
Oracle WebLogic Server | <=10.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-0903 is classified as a denial of service vulnerability.
To fix CVE-2008-0903, apply the relevant patches or updates released by Oracle for BEA WebLogic Server and WebLogic Express.
CVE-2008-0903 affects BEA WebLogic Server and WebLogic Express versions before 9.2 MP3 and 10.0 MP2.
CVE-2008-0903 can be exploited by remote attackers who can send specially crafted URLs.
The impact of CVE-2008-0903 is a potential web server crash, leading to a denial of service.