## https://sploitus.com/exploit?id=SAINT:3731D876ADD116F969B63F8C1F9FB5C0
Added: 07/25/2008
CVE: [CVE-2008-3257](<https://vulners.com/cve/CVE-2008-3257>)
BID: [30273](<http://www.securityfocus.com/bid/30273>)
OSVDB: [47096](<http://www.osvdb.org/47096>)
### Background
[Oracle WebLogic Server](<http://www.bea.com/framework.jsp?CNT=index.htm&FP=/content/products/weblogic/>) (formerly BEA WebLogic Server) is a Java web application platform.
### Problem
A buffer overflow in the Apache Connector for WebLogic Server allows remote attackers to execute arbitrary commands by sending a long, specially crafted POST request.
### Resolution
Apply a fix when available.
### References
<http://secunia.com/advisories/31146/>
### Limitations
Exploit works on WebLogic Server 10.0. On Windows Server 2003, patch KB933729 (rpcrt4.dll version 5.2.3790.4115) must be installed.
### Platforms
Windows 2000
Windows Server 2003