Intrusion PreventionBEA.WebLogic.Server.Redirect.Request.Plugin.Buffer.Overflow
Description
This indicates an attack attempt against a Buffer Overflow vulnerability in BEA Systems Weblogic Server.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application when handling an overly long URL. It allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.
Affected Products
BEA Systems Weblogic Server 5.1 x
BEA Systems Weblogic Server 4.5 x
BEA Systems Weblogic Server 4.0 x
BEA Systems Weblogic Server 3.1.8
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the latest update from the vendor.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-12-22 | 16.984 | Name:BEA. WebLogic. Redirect. Request. Plugin. Buffer. Overflow:BEA. WebLogic. Server. Redirect. Request. Plugin. Buffer. Overflow |
| ID | 31967 |
| Created | May 23, 2012 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2000-0681 |
| Exploit Prediction Score | 2.0% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | IIS |