PT-2006-1497 · Bea · Oracle Weblogic Server+1

Published 2006-01-25 · Updated 2017-07-20 · CVE-2006-0430

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BEA WebLogic Server and WebLogic Express versions 7.0 through SP6 BEA WebLogic Server and WebLogic Express versions 8.1 through SP5 BEA WebLogic Server and WebLogic Express version 9.0

Description The issue affects certain configurations of the server when connection filters are enabled, leading to a server slowdown. This slowdown makes it easier for remote attackers to cause a denial of service.

Recommendations For BEA WebLogic Server and WebLogic Express versions 7.0 through SP6, consider disabling connection filters to prevent server slowdown. For BEA WebLogic Server and WebLogic Express versions 8.1 through SP5, consider disabling connection filters to prevent server slowdown. For BEA WebLogic Server and WebLogic Express version 9.0, consider disabling connection filters to prevent server slowdown.

Fix

Related Identifiers

CVE-2006-0430

Affected Products

Weblogic Express

Oracle Weblogic Server

References · 8

• http://dev2dev.bea.com/pub/advisory/174 · Vendor Advisory
• http://secunia.com/advisories/18592 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0430 · Security Note
• http://securitytracker.com/id?1015528 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24301 · Note
• http://vupen.com/english/advisories/2006/0313 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0430 · Note
• http://securityfocus.com/bid/16358 · Note