2954 matches found
CVE-2002-0106
BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name...
CVE-2002-0106
BEA Systems WebLogic Server 6.1 is affected. The vulnerability allows remote attackers to cause a denial of service by sending a sequence of requests to JSP files that contain an MS-DOS device name. The available documents describe the impact as a DoS but do not provide an exploit vector, affecte...
KPMG-2002003: Bea Weblogic DOS-device Denial of Service
-------------------------------------------------------------------- -=Bea Weblogic DOS-device Denial of Service=- courtesy of KMPG Denmark BUG-ID: 2002003 Released: 8th Jan 2002 -------------------------------------------------------------------- Problem: ======== A flaw in the way the Bea...
WebLogic Server Double Dot GET Request Remote Overflow
Requesting an overly long URL starting with a double dot can crash certain versions of WebLogic servers or possibly even allow for arbitrary code execution. %NASLMINLEVEL 70300 This script was written by Vincent Renardias Licence : GPL v2 Changes by Tenable: - Revised plugin title 4/13/2009 - Add...
Tomcat 3.2.14.0 Weblogic Server 5.1 - URL JSP Request Source Code Disclosure
Tomcat 3.2.14.0 Weblogic Server 5.1 - URL JSP Request Source Code Disclosure source: https://www.securityfocus.com/bid/2527/info BEA Systems WebLogic Server is an enterprise level web and wireless application server. Tomcat can be used together with the Apache web server or a stand alone server f...
def-2001-14: Bea Weblogic Unicode Directory Browsing
====================================================================== Defcom Labs Advisory def-2001-14 Bea Weblogic Unicode Directory Browsing Author: Peter Grьndl [email protected] Release Date: 2001-03-26 ======================================================================...
CVE-2001-0098
Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string...
CVE-2001-0098
Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string...
CVE-2001-0098
WebLogic Server before 5.1.0 is affected by a buffer overflow in URL handling triggered by a long URL starting with "..". The CVE entry (CVE-2001-0098) is supported by OpenVAS references noting that requesting an overly long URL starting with a double dot can crash certain WebLogic versions and m...
CVE-2000-1238
BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / forward slash characters before the restricted pages...
def-2000-04: Bea WebLogic Server dotdot-overflow
====================================================================== Defcom Labs Advisory def-2000-04 Bea WebLogic Server dotdot-overflow Author: Peter Grьndl [email protected] Release Date: 2000-12-19 ======================================================================...
BEA Systems WebLogic Server 4.0 x/4.5 x/5.1 x - Double Dot Buffer Overflow
source: https://www.securityfocus.com/bid/2138/info BEA Systems WebLogic Server is an enterprise level web and wireless application server. Unchecked buffers exist in a particular handler for URL requests that begin with two dots "..". Depending on the data entered into the buffer, WebLogic Serve...
BEA Systems WebLogic Server 4.0 x4.5 x5.1 x - Double Dot Buffer Overflow
BEA Systems WebLogic Server 4.0 x4.5 x5.1 x - Double Dot Buffer Overflow source: https://www.securityfocus.com/bid/2138/info BEA Systems WebLogic Server is an enterprise level web and wireless application server. Unchecked buffers exist in a particular handler for URL requests that begin with two...