PT-2006-1497 · Bea · Oracle Weblogic Server+1

Publicado 2006-01-25 · Atualizado 2017-07-20 · CVE-2006-0430

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BEA WebLogic Server and WebLogic Express versions 7.0 through SP6 BEA WebLogic Server and WebLogic Express versions 8.1 through SP5 BEA WebLogic Server and WebLogic Express version 9.0

Description The issue affects certain configurations of the server when connection filters are enabled, leading to a server slowdown. This slowdown makes it easier for remote attackers to cause a denial of service.

Recommendations For BEA WebLogic Server and WebLogic Express versions 7.0 through SP6, consider disabling connection filters to prevent server slowdown. For BEA WebLogic Server and WebLogic Express versions 8.1 through SP5, consider disabling connection filters to prevent server slowdown. For BEA WebLogic Server and WebLogic Express version 9.0, consider disabling connection filters to prevent server slowdown.

Correção

Identificadores relacionados

CVE-2006-0430

Produtos afetados

Weblogic Express

Oracle Weblogic Server

Referências · 8

• http://dev2dev.bea.com/pub/advisory/174 · Aviso do Fabricante
• http://secunia.com/advisories/18592 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24301 · Nota
• http://vupen.com/english/advisories/2006/0313 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0430 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0430 · Nota de Segurança
• http://securityfocus.com/bid/16358 · Nota
• http://securitytracker.com/id?1015528 · Correção