CVE-2008-2579: High severity oracle weblogic server internet information services vulnerability

Published Jul 15, 2008
·
Updated

Unspecified vulnerability in the WebLogic Server Plugins for Apache, Sun and IIS web servers component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 has unknown impact and remote attack vectors.

Affected Software

99 affected components
Oracle Weblogic Server Internet Information Services=6.1
Oracle Weblogic Server Internet Information Services=6.1-sp1
Oracle Weblogic Server Internet Information Services=6.1-sp2
Oracle Weblogic Server Internet Information Services=6.1-sp3
Oracle Weblogic Server Internet Information Services=6.1-sp4
Oracle Weblogic Server Internet Information Services=6.1-sp5
Oracle Weblogic Server Internet Information Services=6.1-sp6
Oracle Weblogic Server Internet Information Services=6.1-sp7
Oracle Weblogic Server Internet Information Services=7.0
Oracle Weblogic Server Internet Information Services=7.0-sp1
Oracle Weblogic Server Internet Information Services=7.0-sp2
Oracle Weblogic Server Internet Information Services=7.0-sp3
Oracle Weblogic Server Internet Information Services=7.0-sp4
Oracle Weblogic Server Internet Information Services=7.0-sp5
Oracle Weblogic Server Internet Information Services=7.0-sp6
Oracle Weblogic Server Internet Information Services=7.0-sp7
Oracle Weblogic Server Internet Information Services=8.1
Oracle Weblogic Server Internet Information Services=8.1-sp1
Oracle Weblogic Server Internet Information Services=8.1-sp2
Oracle Weblogic Server Internet Information Services=8.1-sp3
Oracle Weblogic Server Internet Information Services=8.1-sp4
Oracle Weblogic Server Internet Information Services=8.1-sp5
Oracle Weblogic Server Internet Information Services=8.1-sp6
Oracle Weblogic Server Internet Information Services=9.0
Oracle Weblogic Server Internet Information Services=9.0-maintenance_pack3
Oracle Weblogic Server Internet Information Services=9.1
Oracle Weblogic Server Internet Information Services=9.1-maintenance_pack3
Oracle Weblogic Server Internet Information Services=9.2
Oracle Weblogic Server Internet Information Services=9.2-maintenance_pack1
Oracle Weblogic Server Internet Information Services=9.2-maintenance_pack2
Oracle Weblogic Server Internet Information Services=9.2-maintenance_pack3
Oracle Weblogic Server Internet Information Services=10.0
Oracle Weblogic Server Internet Information Services=10.0-maintenance_pack1
Oracle Weblogic Server Sun=6.1
Oracle Weblogic Server Sun=6.1-sp1
Oracle Weblogic Server Sun=6.1-sp2
Oracle Weblogic Server Sun=6.1-sp3
Oracle Weblogic Server Sun=6.1-sp4
Oracle Weblogic Server Sun=6.1-sp5
Oracle Weblogic Server Sun=6.1-sp6
Oracle Weblogic Server Sun=6.1-sp7
Oracle Weblogic Server Sun=7.0
Oracle Weblogic Server Sun=7.0-sp1
Oracle Weblogic Server Sun=7.0-sp2
Oracle Weblogic Server Sun=7.0-sp3
Oracle Weblogic Server Sun=7.0-sp4
Oracle Weblogic Server Sun=7.0-sp5
Oracle Weblogic Server Sun=7.0-sp6
Oracle Weblogic Server Sun=7.0-sp7
Oracle Weblogic Server Sun=8.1
Oracle Weblogic Server Sun=8.1-sp1
Oracle Weblogic Server Sun=8.1-sp2
Oracle Weblogic Server Sun=8.1-sp3
Oracle Weblogic Server Sun=8.1-sp4
Oracle Weblogic Server Sun=8.1-sp5
Oracle Weblogic Server Sun=8.1-sp6
Oracle Weblogic Server Sun=9.0
Oracle Weblogic Server Sun=9.0-maintenance_pack3
Oracle Weblogic Server Sun=9.1
Oracle Weblogic Server Sun=9.1-maintenance_pack3
Oracle Weblogic Server Sun=9.2
Oracle Weblogic Server Sun=9.2-maintenance_pack1
Oracle Weblogic Server Sun=9.2-maintenance_pack2
Oracle Weblogic Server Sun=9.2-maintenance_pack3
Oracle Weblogic Server Sun=10.0
Oracle Weblogic Server Sun=10.0-maintenance_pack1
Oracle Weblogic Server Apache=6.1
Oracle Weblogic Server Apache=6.1-sp1
Oracle Weblogic Server Apache=6.1-sp2
Oracle Weblogic Server Apache=6.1-sp3
Oracle Weblogic Server Apache=6.1-sp4
Oracle Weblogic Server Apache=6.1-sp5
Oracle Weblogic Server Apache=6.1-sp6
Oracle Weblogic Server Apache=6.1-sp7
Oracle Weblogic Server Apache=7.0
Oracle Weblogic Server Apache=7.0-sp1
Oracle Weblogic Server Apache=7.0-sp2
Oracle Weblogic Server Apache=7.0-sp3
Oracle Weblogic Server Apache=7.0-sp4
Oracle Weblogic Server Apache=7.0-sp5
Oracle Weblogic Server Apache=7.0-sp6
Oracle Weblogic Server Apache=7.0-sp7
Oracle Weblogic Server Apache=8.1
Oracle Weblogic Server Apache=8.1-sp1
Oracle Weblogic Server Apache=8.1-sp2
Oracle Weblogic Server Apache=8.1-sp3
Oracle Weblogic Server Apache=8.1-sp4
Oracle Weblogic Server Apache=8.1-sp5
Oracle Weblogic Server Apache=8.1-sp6
Oracle Weblogic Server Apache=9.0
Oracle Weblogic Server Apache=9.0-maintenance_pack3
Oracle Weblogic Server Apache=9.1
Oracle Weblogic Server Apache=9.1-maintenance_pack3
Oracle Weblogic Server Apache=9.2
Oracle Weblogic Server Apache=9.2-maintenance_pack1
Oracle Weblogic Server Apache=9.2-maintenance_pack2
Oracle Weblogic Server Apache=9.2-maintenance_pack3
Oracle Weblogic Server Apache=10.0
Oracle Weblogic Server Apache=10.0-maintenance_pack1

Event History

Jul 15, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2008-2579?

The severity of CVE-2008-2579 is currently unknown due to unspecified details about its impact.

2

How do I fix CVE-2008-2579?

To resolve CVE-2008-2579, it is recommended to apply the latest security patches or updates for affected versions of Oracle WebLogic Server.

3

Which versions are affected by CVE-2008-2579?

CVE-2008-2579 affects multiple versions of Oracle WebLogic Server including 6.1, 7.0, 8.1, 9.0, 9.1, 9.2, and 10.0.

4

Can CVE-2008-2579 be exploited remotely?

Yes, CVE-2008-2579 has remote attack vectors, meaning it could be exploited from an external source.

5

What components are affected by CVE-2008-2579?

The vulnerability affects the WebLogic Server Plugins for Apache, Sun, and IIS web servers in Oracle BEA Product Suite.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203