[SA19310] BEA WebLogic Server/Express Two Vulnerabilities

TITLE:
BEA WebLogic Server/Express Two Vulnerabilities

SECUNIA ADVISORY ID:
SA19310

VERIFY ADVISORY:
http://secunia.com/advisories/19310/

CRITICAL:
Moderately critical

IMPACT:
Exposure of system information, Exposure of sensitive information,
DoS

WHERE:
>From remote

SOFTWARE:
BEA WebLogic Server 8.x
http://secunia.com/product/1360/
BEA WebLogic Server 7.x
http://secunia.com/product/754/
BEA WebLogic Server 6.x
http://secunia.com/product/753/
BEA WebLogic Express 8.x
http://secunia.com/product/1843/
BEA WebLogic Express 7.x
http://secunia.com/product/1282/
BEA WebLogic Express 6.x
http://secunia.com/product/1281/

DESCRIPTION:
Two vulnerabilities have been reported in WebLogic Server / Express,
which can be exploited by malicious people to disclose potentially
sensitive information and to cause a DoS (Denial of Service).

1) An error in the restriction of an unspecified internal servlet can
be exploited by any user with HTTP access to access files on the local
Windows file system.

The vulnerability affects the following versions:

• WebLogic Server 6.1 released through Service Pack 7 (all
  platforms)

2) An error in the XML parser can be exploited to cause the WebLogic
Server instance to run out of memory when parsing a specially-crafted
XML document.

Successful exploitation requires that applications accept XML data
from clients and pass them to the parser without canonicalization.

The vulnerability affects the following versions of WebLogic
Server/Express:

• WebLogic Server 8.1 released through Service Pack 4 (all
  platforms)
• WebLogic Server 7.0 released through Service Pack 6 (all
  platforms)
• WebLogic Server 6.1 released through Service Pack 7 (all platforms)

SOLUTION:
Apply patches and service packs (see the original vendor advisories).

PROVIDED AND/OR DISCOVERED BY:
Reported by vendor.

ORIGINAL ADVISORY:
BEA06-123.00:
http://dev2dev.bea.com/pub/advisory/183

BEA06-120.00:
http://dev2dev.bea.com/pub/advisory/180

---

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.