CVE:CVE-2008-3257
CNNVD:CNNVD-200807-361
WebLogic包含多种应用系统集成方案，包括Server/Express/Integration等。
WebLogic的Apache连接器实现上存在漏洞，如果远程攻击者向WebLogic的Apache连接器发送了超长的POST请求的话，就可能触发栈溢出，导致执行任意指令。
solution:Upgrade bea weblogic_server to a higher version than 3.1.8,4.0,4.0.4,4.5,4.5.1,4.5.1:sp15,4.5.2,4.5.2:sp1,4.5.2:sp2,5.1,5.1:sp1,5.1:sp10,5.1:sp11,5.1:sp12,5.1:sp13,5.1:sp2,5.1:sp3,5.1:sp4,5.1:sp5,5.1:sp6,5.1:sp7,5.1:sp8,5.1:sp9,6.0,6.0:sp1,6.0:sp2,6.0:sp6,6.1,6.1:sp1,6.1:sp2,6.1:sp3,6.1:sp4,6.1:sp5,6.1:sp6,6.1:sp7,6.1:sp8,7.0,7.0:sp1,7.0:sp2,7.0:sp3,7.0:sp4,7.0:sp5,7.0:sp6,7.0:sp7,7.0.0.1,7.0.0.1:sp1,7.0.0.1:sp2,7.0.0.1:sp3,7.0.0.1:sp4,8.1,8.1:sp1,8.1:sp2,8.1:sp3,8.1:sp4,8.1:sp5,8.1:sp6,9.0,9.0:ga,9.0:sp1,9.0:sp2,9.0:sp3,9.0:sp4,9.0:sp5,9.1,9.1:ga,9.2,9.2:mp1,9.2:mp2,10.0,and avoid the version 3.1.8,4.0,4.0.4,4.5,4.5.1,4.5.1:sp15,4.5.2,4.5.2:sp1,4.5.2:sp2,5.1,5.1:sp1,5.1:sp10,5.1:sp11,5.1:sp12,5.1:sp13,5.1:sp2,5.1:sp3,5.1:sp4,5.1:sp5,5.1:sp6,5.1:sp7,5.1:sp8,5.1:sp9,6.0,6.0:sp1,6.0:sp2,6.0:sp6,6.1,6.1:sp1,6.1:sp2,6.1:sp3,6.1:sp4,6.1:sp5,6.1:sp6,6.1:sp7,6.1:sp8,7.0,7.0:sp1,7.0:sp2,7.0:sp3,7.0:sp4,7.0:sp5,7.0:sp6,7.0:sp7,7.0.0.1,7.0.0.1:sp1,7.0.0.1:sp2,7.0.0.1:sp3,7.0.0.1:sp4,8.1,8.1:sp1,8.1:sp2,8.1:sp3,8.1:sp4,8.1:sp5,8.1:sp6,9.0,9.0:ga,9.0:sp1,9.0:sp2,9.0:sp3,9.0:sp4,9.0:sp5,9.1,9.1:ga,9.2,9.2:mp1,9.2:mp2,10.0; Upgrade bea_systems apache_connector_in_weblogic_server to a higher version than *; Upgrade bea_systems weblogic_server to a higher version than 10.0_mp1,and avoid the version 10.0_mp1; Upgrade oracle weblogic_server to a higher version than 10.3,and avoid the version (,10.3]