Oracle BEA WebLogic Server Plug-ins Certificate Buffer Overflow
Severity: HIGH
CVE Identifier: CVE-2009-1016
Advisory Date: JUN 09, 2016
DESCRIPTION
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote authenticated users to affect confidentiality, integrity, and availability, related to IIS. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow involving an unspecified Server Plug-in and a crafted SSL certificate.
TREND MICRO PROTECTION INFORMATION
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1003476
Trend Micro Deep Security DPI Rule Name: 1003476 - Oracle BEA WebLogic Server Plug-ins Certificate Buffer Overflow
AFFECTED SOFTWARE AND VERSION
- oracle bea_product_suite 10.0
- oracle bea_product_suite 10.3
- oracle bea_product_suite 7.0
- oracle bea_product_suite 8.1
- oracle bea_product_suite 9.0
- oracle bea_product_suite 9.1
- oracle bea_product_suite 9.2