PT-2007-1881 · Oracle · Bea Weblogic

Publicado 2007-01-23 · Atualizado 2018-10-17 · CVE-2007-0410

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BEA WebLogic versions 7.0 through 7.0 SP6 BEA WebLogic versions 8.1 through 8.1 SP5 BEA WebLogic versions 9.0 BEA WebLogic versions 9.1

Description The issue is related to thread management in BEA WebLogic when T3 authentication is used, allowing remote attackers to cause a denial of service, resulting in thread and system hang via unspecified sequences of events.

Recommendations For BEA WebLogic versions 7.0 through 7.0 SP6, update to a version that addresses the thread management issue. For BEA WebLogic versions 8.1 through 8.1 SP5, update to a version that addresses the thread management issue. For BEA WebLogic versions 9.0, update to a version that addresses the thread management issue. For BEA WebLogic versions 9.1, update to a version that addresses the thread management issue.

Correção

Identificadores relacionados

CVE-2007-0410

Produtos afetados

Bea Weblogic

Referências · 8

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0410 · Nota
• http://secunia.com/advisories/23750 · Nota
• http://vupen.com/english/advisories/2007/0213 · Nota
• http://securityfocus.com/bid/22082 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0410 · Nota de Segurança
• http://osvdb.org/38502 · Nota
• http://securitytracker.com/id?1017525 · Nota
• http://dev2dev.bea.com/pub/advisory/204 · Aviso do Fabricante