ID CVE-2007-0425
Summary Unspecified vulnerability in BEA WebLogic Platform and Server 8.1 through 8.1 SP5, and JRockit 1.4.2 R4.5 and earlier, allows attackers to gain privileges via unspecified vectors, related to an "overflow condition," probably a buffer overflow.
References
Vulnerable Configurations
  • cpe:2.3:a:bea:jrockit:1.4.2:r24.5:*:*:*:*:*:*
    cpe:2.3:a:bea:jrockit:1.4.2:r24.5:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:5.1:sp5:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:5.1:sp5:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:5.1:sp5:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:5.1:sp5:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:5.1:sp5:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:5.1:sp5:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:express:*:*:*
    cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:express:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp5:express:*:*:*:*:*
  • cpe:2.3:a:bea:weblogic_server:8.1:sp5:win32:*:*:*:*:*
    cpe:2.3:a:bea:weblogic_server:8.1:sp5:win32:*:*:*:*:*
CVSS
Base: 7.5 (as of 08-03-2011 - 02:49)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bea BEA07-155.00
osvdb 38515
sectrack 1017525
secunia 23750
vupen ADV-2007-0213
Last major update 08-03-2011 - 02:49
Published 23-01-2007 - 00:28
Last modified 08-03-2011 - 02:49
Back to Top