Exploitation Summary
EIP tracks 3 public exploits for CVE-2008-3257.
PoCs published by Metasploit, kingcope, KingCope, juan vazquez, including Metasploit module exploits/windows/http/bea_weblogic_post_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in the BEA WebLogic Apache plugin (CVE-2008-3257) via a crafted HTTP POST request. It includes version fingerprinting and targets specific Windows systems without DEP.
Description
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allows remote attackers to execute arbitrary code via a long HTTP version string, as demonstrated by a string after "POST /.jsp" in an HTTP request.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in the BEA WebLogic Apache plugin (CVE-2008-3257) via a crafted HTTP POST request. It includes version fingerprinting and targets specific Windows systems without DEP.
This exploit targets a vulnerability in the Bea Weblogic Apache Connector, allowing remote command execution on Windows Server 2003 SP2 via a stack-based buffer overflow. It also includes a DoS module for the Apache frontend.
This Metasploit module exploits a stack-based buffer overflow in the BEA WebLogic Apache plugin (CVE-2008-3257) via a crafted HTTP POST request. It includes fingerprinting for vulnerable versions and targets Windows systems without DEP.