ID OSVDB:5737
Type osvdb
Vulnerability Description
BEA WebLogic Server contains a flaw that may lead to an unauthorized information disclosure. With a specially crafted HTTP GET request, an remote attacker can cause the server to disclose hostname information resulting in a loss of confidentiality.

Solution Description
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround: Filter requests that start with a “.” in a proxy or firewall with URL filtering capabilities.

Short Description
BEA WebLogic Server contains a flaw that may lead to an unauthorized information disclosure. With a specially crafted HTTP GET request, an remote attacker can cause the server to disclose hostname information resulting in a loss of confidentiality
Manual Testing Notes
telnet [victim] 80
GET . HTTP/1.0\r\n\r\n

Referance :https://www.oracle.com/corporate/acquisitions/bea/index.html