CVE-2007-0415

BEA WebLogic Server 8.1–8.1 SP5 is affected by an access-control bypass after dynamic update/redeployment of applications implemented as exploded jars. The vulnerability allows bypassing intended restrictions, but the provided documents do not specify a fix/patch version or a workaround. Exploita...

CVE-2007-0423

BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact...

CVE-2007-0419

The CVE-2007-0419 issue affects the BEA WebLogic Server proxy plug-in for the Apache HTTP Server (pre June 2006). The root cause is improper handling of protocol errors in the plug-in, which can allow remote attackers to cause a denial of service (server outage). The vulnerability description not...

CVE-2007-0410

Unspecified vulnerability in the thread management in BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1, when T3 authentication is used, allows remote attackers to cause a denial of service thread and system hang via unspecified "sequences of events."...

CVE-2007-0420

BEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote attackers to obtain sensitive information via malformed HTTP requests, which reveal data from previous requests...

CVE-2007-0411

BEA WebLogic Server 8.1 through 8.1 SP5, 9.0, 9.1, and 9.2 Gold, when WS-Security is used, does not properly validate certificates, which allows remote attackers to conduct a man-in-the-middle MITM attack...

CVE-2007-0425

Unspecified vulnerability in BEA WebLogic Platform and Server 8.1 through 8.1 SP5, and JRockit 1.4.2 R4.5 and earlier, allows attackers to gain privileges via unspecified vectors, related to an "overflow condition," probably a buffer overflow...

CVE-2007-0415

BEA WebLogic Server 8.1 through 8.1 SP5 does not properly enforce access control after a dynamic update and dynamic redeployment of an application that is implemented through exploded jars, which allows attackers to bypass intended access restrictions...

CVE-2007-0426

BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate entitlement policy changes if the changes are made on a managed server while the Administrative Server is unavailable, which might allow attackers to...

CVE-2007-0419

The BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not properly handle protocol errors, which allows remote attackers to cause a denial of service server outage...

CVE-2007-0422

BEA WebLogic Server 9.0, 9.1, and 9.2 Gold, when running on Solaris 9, allows remote attackers to cause a denial of service server inaccessibility via manipulated socket connections...

CVE-2007-0425

BEA WebLogic Platform/Server 8.1–8.1 SP5 and JRockit 1.4.2 R4.5 and earlier are affected by an unspecified vulnerability related to an overflow condition (likely a buffer overflow) that could allow attackers to gain privileges via unspecified vectors. The connected sources confirm the affected pr...

CVE-2007-0408

BEA WebLogic Server 8.1–8.1 SP4 does not properly validate client certificates when reusing cached connections, enabling remote access via an untrusted X.509 certificate. Affected product: BEA WebLogic Server (v8.1 to 8.1 SP4). Root cause: insufficient validation on reused cached TLS/SSL client c...

CVE-2007-0418

BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a security policy that declares permissions for EJB methods that have array parameters, which allows remote attackers to obtain unauthorized access to these methods...

CVE-2007-0414

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, and 9.0 allows remote attackers to cause a denial of service server hang via certain requests that cause muxer threads to block when processing error pages...

BEA JRockit Java虚拟机未明堆栈缓冲区溢出漏洞

BEA JRockit JDK为开发和运行使用Java语言编写的应用程序提供了各种工具、实用程序和一个完整的运行时环境。 BEA JRockit在特殊环境下存在溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 BEA WebLogic Server 8.1 BEA WebLogic Platform 8.1 BEA WebLogic Express 8.1 BEA JRockit 1.4.205 补丁下载： BEA WebLogic Server 8.1 BEA WebLogic Server...

BEA产品多个远程安全漏洞

BEA Systems WebLogic包含多种应用系统集成方案，包括Server/Express/Integration等。 BEA Weblogic中存在多个安全漏洞，可能允许恶意攻击者获得敏感信息、绕过某些安全限制、导致拒绝服务或完全入侵系统。 这些漏洞包括： 1 SSL库中的漏洞可能允许判断明文块； 2 从缓存重用连接时服务器没有正确地验证客户端证书，导致攻击者可以通过X.509证书访问Web服务器。成功攻击要求应用程序允许通过单个客户端进程访问多个用户； 3 存储在JDBCDataSourceFactory MBean Properties属性中的口令没有加密； 4...

BEA WebLogic Server/WebLogic Express Java RMI不正确会话继承漏洞

BEA Systems WebLogic包含多种应用系统集成方案，包括Server/Express/Integration等。 BEA WebLogic的对Java Remote Method Invocation RMI文档描述存在问题，遵从此文档开发的产品可导致权限提升问题。 问题发生在当客户多次以不同用户登录WebLogic服务器时，文档描述客户的行为是：当RMI请求提交时是没有当前用户关联客户线程的，这对RMI通过T3协议来说是正确的，但针对RMI通过IIOP协议走的情况下是不正确的，任意依赖此文档描述的行为可导致在RMI调用中获得其他用户的验证信息。 BEA Systems...

BEA WebLogic Server和WebLogic Express Application Role未授权访问漏洞

BEA Systems WebLogic包含多种应用系统集成方案，包括Server/Express/Integration等。 WebLogic Server和WebLogic Express应用程序不正确实现Servlet 2.3标准，远程攻击者可以利用这个漏洞未授权访问应用系统资源。 当WEB应用程序指定包含在security-constraint标记的role-name标记中的'role name'为''时，会触发此漏洞。下面是web.xml文件中使用有问题的‘’代码： security-constraint web-resource-collection...

Design/Logic Flaw

A recommended admin password reset mechanism for BEA WebLogic Server 8.1, when followed before October 10, 2005, causes the administrator password to be stored in cleartext in the domain directory, which could allow attackers to gain privileges...