CVE-2007-1419

CVE-2007-1419 affects Java Dynamic Management Kit 5.1, where the JMX RMI-IIOP Remote API does not properly enforce java.policy. This allows a local attacker with privileged remote authenticated access to obtain certain MBeans data. The issue is described as a local-privilege/数据访问 risk with a base...

CVE-2005-4763

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol IIOP is used, sometimes include a password in an exception message that is sent to a client or stored in a log file, which might allow remote attackers to...

CVE-2005-4763

CVE-2005-4763 affects BEA WebLogic Server and WebLogic Express (8.1 SP4 and earlier; 7.0 SP6 and earlier; 6.1 SP7 and earlier) where IIOP usage can leak a password in an exception message or logged output, potentially enabling remote attackers to perform unauthorized actions. The vulnerability is...

CORBA IIOP Listener Detection

The remote host is running a CORBA Internet Inter-ORB Protocol IIOP listener on the specified port. CORBA is a vendor-independent architecture for applications that work together, and IIOP is a protocol by which such applications can communicate over TCP/IP. C Tenable Network Security, Inc...

CVE-2005-4763

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol IIOP is used, sometimes include a password in an exception message that is sent to a client or stored in a log file, which might allow remote attackers to...