BEA Systems WebLogic Server 4.0 x/4.5 x/5.1 x - Double Dot Buffer Overflow
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | WebLogic Server < 5.1 SP 7 ".." URL Handling Remote Overflow DoS | 20 Aug 200400:00 | – | nessus |
| WebLogic Server Double Dot GET Request Remote Overflow | 21 Jun 200100:00 | – | nessus |
 | CVE-2001-0098 | 2 Feb 200105:00 | – | cve |
 | CVE-2001-0098 | 2 Feb 200105:00 | – | cvelist |
 | CVE-2001-0098 | 12 Feb 200105:00 | – | nvd |
 | WebLogic Server DoS | 3 Nov 200500:00 | – | openvas |
| WebLogic Server DoS | 3 Nov 200500:00 | – | openvas |
source: https://www.securityfocus.com/bid/2138/info
BEA Systems WebLogic Server is an enterprise level web and wireless application server.
Unchecked buffers exist in a particular handler for URL requests that begin with two dots "..". Depending on the data entered into the buffer, WebLogic Server could be forced to crash or arbitrary code could be executed on the system in the security context of the web server. In the event that random data was sent in order to crash the server, restarting the application would be required in order to regain normal functionality.
..<overly long string of characters>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 Aug 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 210
EPSS0.78371