PT-2007-1881 · Oracle · Bea Weblogic

Published 2007-01-23 · Updated 2018-10-17 · CVE-2007-0410

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BEA WebLogic versions 7.0 through 7.0 SP6 BEA WebLogic versions 8.1 through 8.1 SP5 BEA WebLogic versions 9.0 BEA WebLogic versions 9.1

Description The issue is related to thread management in BEA WebLogic when T3 authentication is used, allowing remote attackers to cause a denial of service, resulting in thread and system hang via unspecified sequences of events.

Recommendations For BEA WebLogic versions 7.0 through 7.0 SP6, update to a version that addresses the thread management issue. For BEA WebLogic versions 8.1 through 8.1 SP5, update to a version that addresses the thread management issue. For BEA WebLogic versions 9.0, update to a version that addresses the thread management issue. For BEA WebLogic versions 9.1, update to a version that addresses the thread management issue.

Fix

Related Identifiers

CVE-2007-0410

Affected Products

Bea Weblogic

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-0410 · Security Note
• http://dev2dev.bea.com/pub/advisory/204 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0410 · Note
• http://secunia.com/advisories/23750 · Note
• http://vupen.com/english/advisories/2007/0213 · Note
• http://securityfocus.com/bid/22082 · Note
• http://osvdb.org/38502 · Note
• http://securitytracker.com/id?1017525 · Note