Lucene search
HistoryJan 25, 2006 - 11:07 p.m.
CVE-2006-0419
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
AI Score
6.7
Confidence
High
EPSS
0.007
Percentile
80.3%
BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections.
Affected configurations
Node
beaweblogic_serverMatch7.0sp1
ORbeaweblogic_serverMatch7.0sp1express
ORbeaweblogic_serverMatch7.0sp2
ORbeaweblogic_serverMatch7.0sp2express
ORbeaweblogic_serverMatch7.0sp3
ORbeaweblogic_serverMatch7.0sp3express
ORbeaweblogic_serverMatch7.0sp4
ORbeaweblogic_serverMatch7.0sp4express
ORbeaweblogic_serverMatch7.0sp5
ORbeaweblogic_serverMatch7.0sp5express
ORbeaweblogic_serverMatch7.0sp6
ORbeaweblogic_serverMatch7.0sp6express
ORbeaweblogic_serverMatch8.1sp1
ORbeaweblogic_serverMatch8.1sp1express
ORbeaweblogic_serverMatch8.1sp2
ORbeaweblogic_serverMatch8.1sp2express
ORbeaweblogic_serverMatch8.1sp3
ORbeaweblogic_serverMatch8.1sp3express
ORbeaweblogic_serverMatch8.1sp4
ORbeaweblogic_serverMatch8.1sp4express
ORbeaweblogic_serverMatch8.1sp5
ORbeaweblogic_serverMatch8.1sp5express
ORbeaweblogic_serverMatch9.0
ORbeaweblogic_serverMatch9.0express
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:* |
| bea | weblogic_server | 7.0 | cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-0419
2006-01-25 23:00:00
prion
prion
Design/Logic Flaw
2006-01-25 23:07:00
cve
cve
CVE-2006-0419
2006-01-25 23:07:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
AI Score
6.7
Confidence
High
EPSS
0.007
Percentile
80.3%
Related for NVD:CVE-2006-0419