PT-2007-1892 · Bea · Bea Weblogic Server

Publicado 2007-01-23 · Atualizado 2018-10-17 · CVE-2007-0421

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions BEA WebLogic Server versions 6.1 through 6.1 SP7 BEA WebLogic Server versions 7.0 through 7.0 SP7

Description The issue allows remote attackers to cause a denial of service, specifically disk consumption, by sending requests with malformed headers. This results in a large amount of data being written to the server log.

Recommendations For BEA WebLogic Server versions 6.1 through 6.1 SP7, consider restricting access to prevent malicious requests until a fix is available. For BEA WebLogic Server versions 7.0 through 7.0 SP7, consider implementing logging limits to prevent disk consumption from large log files.

Correção

Identificadores relacionados

CVE-2007-0421

Produtos afetados

Bea Weblogic Server

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-0421 · Nota de Segurança
• http://secunia.com/advisories/23750 · Nota
• http://vupen.com/english/advisories/2007/0213 · Nota
• http://securityfocus.com/bid/22082 · Nota
• http://osvdb.org/32859 · Nota
• http://securitytracker.com/id?1017525 · Nota
• http://dev2dev.bea.com/pub/advisory/215 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0421 · Nota