0-day exploit for the Apache plugin for Oracle WebLogic

[kjkoster]

Dear All,

Slashdot readers already know, but there is a 0-day remote exploit for the Apache plugin for Oracle WebLogic (formerly BEA WebLogic).

http://blogs.oracle.com/security/2008/07/security_alert_for_cve-2008-3257_released.html

[kjkoster]

Dear All,

Those of you who may be affected by this problem have probably already heard, but there is a patch from Oracle.

https://support.bea.com/application_content/product_portlets/securityadvisories/2793.html

Kees Jan