• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

BEA Multiple Products Multiple Vulnerabilities

Solution:
The vendor has released updates to address these issues. Consult the referenced advisories for details on obtaining the appropriate updates. Some of these updates may be installed with the smart update tool.


BEA Systems Weblogic Server 9.0

• BEA Systems CR232325_900.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR232325_900.jar


• BEA Systems CR236939_900rp.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR236939_900rp.jar


• BEA Systems CR237973_900.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR237973_900.jar


• BEA Systems CR248397_900.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR248397_900.jar


• BEA Systems CR258305_900.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR258305_900.jar


• BEA Systems CR265150_900.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR265150_900.jar


• BEA Systems CR266413_900.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR266413_900.jar


• BEA Systems CR276583_900.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR276583_900.jar


• BEA Systems CR283953_900rp.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR283953_900rp.jar

BEA Systems WebLogic Express 6.1 SP 7

• BEA Systems CR102790_61sp7.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR102790_61sp7.jar


• BEA Systems CR239231_61sp7.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR239231_61sp7.jar


• BEA Systems CR248397_610sp7.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR248397_610sp7.jar


• BEA Systems CR276586_610sp7.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR276586_610sp7.jar

BEA Systems Weblogic Server 7.0 SP 7

• BEA CR102790_700sp7.zip
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR102790_700sp7.zip


• BEA Systems CR239231_70sp7.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR239231_70sp7.jar

BEA Systems WebLogic Express 7.0

• BEA Systems CR265150_700sp7.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR265150_700sp7.jar

BEA Systems WebLogic Express 7.0 SP 7

• BEA CR102790_700sp7.zip
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR102790_700sp7.zip


• BEA Systems CR276586_700sp7.jar
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/CR276586_700sp7.jar