now that oracle owns all that what was bea, you could theoretically ask oracle support. that is if you're a paying customer. you can forget finding a download link within oracle's public domain for any version prior to version 10.
hoping to make life easier for folks in a similar position, here are the ftp download links i found:
kindly hosted by peoplesoft...who strangely don't exist anymore. the downloads also include patches by peoplesoft.