Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Hackers Adapting Administrator Tools | Main | Social Networking Tool for Scammers »

Emergency Oracle Patch to BEA WebLogic

Oracle switched gears from its usual quarterly patch release cycle to issue a patch to a critical vulnerability in a WebLogic plug-in for Apache.

The vulnerability, which can be exploited remotely and without authentication, affects a number of versions:

# Oracle WebLogic Server 10.0 released through MP1
# Oracle WebLogic Server 9.2 released through MP3
# Oracle WebLogic Server 9.1
# Oracle WebLogic Server 9.0
# Oracle WebLogic Server 8.1 released through SP6
# Oracle WebLogic Server 7.0 released through SP7
# Oracle WebLogic Server 6.1 released through SP7

More details are here, including a link to download the patch.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/810

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net