Oracle warns over unpatched vuln
Oracle has decided to break its quarterly update release cycle with plans to develop a patch against a zero-day exploit. The planned fix addresses a buffer overflow flaw in Oracle WebLogic Server which creates a means for hackers to plant malware onto targeted systems. By sending a specially-malformed HTTP POST request attackers …
Some bugs are a right bugger of a BOFH if you don't deal with them right.
"By sending a specially-malformed HTTP POST request attackers might be able to assault vulnerable systems without needing either user names or passwords, an alert on the bug by IBM's X-force security division warns."
And then there is also the ZerodDay Opportunist, the Yin of that Negative Yang, who would be into sending especially-informed HTTP POSTs, which may or may not be requests for anything.
Sign up, sign up for The Register's weekly IT security newsletter - click here
Popular Whitepapers
- The BI Inflexion Point
Information is a right, not a privilege - Risk and Resilience
The application availability gamble - Register Research on: Agile development - is it right for you
Reaping the benefits of modern software practice - The Register Guide to managing spam
A primer on the implications for enterprise IT - The Register Guide to email security
A primer on the challenges of securing email and approaches to resolving them - High Performance for All
Responding to the needs of compute-intensive workloads
