Exploitation Summary
EIP tracks 3 public exploits for CVE-2008-5457.
PoCs published by Metasploit, Guido Landi, including Metasploit module exploits/windows/http/bea_weblogic_jsessionid.
AI-analyzed exploit summary This exploit targets a buffer overflow in BEA WebLogic's plugin when clustering is configured. It leverages a long JSESSIONID cookie value to achieve arbitrary code execution via a SEH-based exploit.
Description
Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Exploits (3)
This exploit targets a buffer overflow in BEA WebLogic's plugin when clustering is configured. It leverages a long JSESSIONID cookie value to achieve arbitrary code execution via a SEH-based exploit.
This exploit targets a buffer overflow vulnerability in a JSP application (CVE-2008-5457) by sending a maliciously crafted POST request with a long JSESSIONID parameter containing shellcode. It achieves remote code execution by overwriting the SEH and triggering a reverse shell.
This Metasploit module exploits a buffer overflow in BEA WebLogic's plugin via a maliciously crafted JSESSIONID cookie. It targets specific versions of the WebLogic module on Windows Apache 2.2, achieving remote code execution through SEH overwrites.