Lucene search

[email protected]CVE-2005-1748

HistoryMay 24, 2005 - 4:00 a.m.

CVE-2005-1748

2005-05-2404:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

bea

weblogic

express

ldap

server

remote

attack

user

denial of service

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.006 Low

EPSS

Percentile

77.8%

JSON

The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.

CPENameOperatorVersion
bea:weblogic_serverbea weblogic servereq8.1
bea:weblogic_serverbea weblogic servereq7.0
bea:weblogic_serverbea weblogic servereq7.0.0.1
bea:weblogic_serverbea weblogic servereq6.1
bea:weblogic_serverbea weblogic servereq6.0
oracle:weblogic_portaloracle weblogic portaleq8.0

CPE	Name	Operator	Version
bea:weblogic_server	bea weblogic server	eq	8.1
bea:weblogic_server	bea weblogic server	eq	7.0
bea:weblogic_server	bea weblogic server	eq	7.0.0.1
bea:weblogic_server	bea weblogic server	eq	6.1
bea:weblogic_server	bea weblogic server	eq	6.0
oracle:weblogic_portal	oracle weblogic portal	eq	8.0

References

dev2dev.bea.com/pub/advisory/131

secunia.com/advisories/15486

securitytracker.com/id?1014049

www.securityfocus.com/bid/13717

www.vupen.com/english/advisories/2005/0608

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.006 Low

EPSS

Percentile

77.8%

JSON

Related for CVE-2005-1748

nessus1