PT-2007-1896 · Bea+1 · Bea Weblogic Server+2

Publicado 2007-01-23 · Atualizado 2011-03-08 · CVE-2007-0425

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BEA WebLogic Platform and Server versions 8.1 through 8.1 SP5 JRockit versions 1.4.2 R4.5 and earlier

Description The issue allows attackers to gain privileges via unspecified vectors, related to an "overflow condition," which is probably a buffer overflow.

Recommendations For BEA WebLogic Platform and Server versions 8.1 through 8.1 SP5, update to a version later than 8.1 SP5 to resolve the issue. For JRockit versions 1.4.2 R4.5 and earlier, update to a version later than 1.4.2 R4.5 to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-0425

Produtos afetados

Bea Weblogic Platform

Bea Weblogic Server

Jrockit

Referências · 7

• http://securitytracker.com/id?1017525 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0425 · Nota de Segurança
• http://dev2dev.bea.com/pub/advisory/222 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/0213 · Nota
• http://osvdb.org/38515 · Nota
• http://secunia.com/advisories/23750 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0425 · Nota