Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

BEA Systems WebLogic Server DOS Device Denial of Service Vulnerability

BEA Systems WebLogic Server is an enterprise level web and wireless application server for Microsoft Windows and most Unix and Linux vendors.

It is possible to remotely crash a system running Bea Systems WebLogic Server by submitting numerous URL requests for a MS-DOS devicename appended with a .jsp extension, such as

www.example.com/aux.jsp

A hard reboot of the exploited server will be required to restore web services.







 

Privacy Statement
Copyright 2008, SecurityFocus