TITLE:
BEA WebLogic Server/Express Two Vulnerabilities
SECUNIA ADVISORY ID:
SA19310
VERIFY ADVISORY:
http://secunia.com/advisories/19310/
CRITICAL:
Moderately critical
IMPACT:
Exposure of system information, Exposure of sensitive information,
DoS
WHERE:
>From remote
SOFTWARE:
BEA WebLogic Server 8.x
http://secunia.com/product/1360/
BEA WebLogic Server 7.x
http://secunia.com/product/754/
BEA WebLogic Server 6.x
http://secunia.com/product/753/
BEA WebLogic Express 8.x
http://secunia.com/product/1843/
BEA WebLogic Express 7.x
http://secunia.com/product/1282/
BEA WebLogic Express 6.x
http://secunia.com/product/1281/
DESCRIPTION:
Two vulnerabilities have been reported in WebLogic Server / Express,
which can be exploited by malicious people to disclose potentially
sensitive information and to cause a DoS (Denial of Service).
1) An error in the restriction of an unspecified internal servlet can
be exploited by any user with HTTP access to access files on the local
Windows file system.
The vulnerability affects the following versions:
2) An error in the XML parser can be exploited to cause the WebLogic
Server instance to run out of memory when parsing a specially-crafted
XML document.
Successful exploitation requires that applications accept XML data
from clients and pass them to the parser without canonicalization.
The vulnerability affects the following versions of WebLogic
Server/Express:
SOLUTION:
Apply patches and service packs (see the original vendor advisories).
PROVIDED AND/OR DISCOVERED BY:
Reported by vendor.
ORIGINAL ADVISORY:
BEA06-123.00:
http://dev2dev.bea.com/pub/advisory/183
BEA06-120.00:
http://dev2dev.bea.com/pub/advisory/180
About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.
Subscribe:
http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/
Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.