CVE-2006-0419 — MEDIUM (6.4)

Vulnerability Description

BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections.

CVSS Score

6.4

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:P

Confidentiality

PARTIAL

Integrity

NONE

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Bea	Weblogic Server	7.0

References

http://dev2dev.bea.com/pub/advisory/163ExploitVendor Advisory
http://securitytracker.com/id?1015528Patch
http://dev2dev.bea.com/pub/advisory/163ExploitVendor Advisory
http://securitytracker.com/id?1015528Patch

FAQ

What is CVE-2006-0419?

CVE-2006-0419 is a vulnerability with a CVSS score of 6.4 (MEDIUM). BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a den...

How severe is CVE-2006-0419?

CVE-2006-0419 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2006-0419?

Check the references section above for vendor advisories and patch information. Affected products include: Bea Weblogic Server.