BEA WebLogic Multiple Vulnerabilities
BID:16358
Info
BEA WebLogic Multiple Vulnerabilities
| Bugtraq ID: | 16358 |
| Class: | Unknown |
| CVE: |
CVE-2006-0422 CVE-2006-0428 CVE-2006-0431 CVE-2006-0423 CVE-2006-0426 CVE-2006-0429 CVE-2006-0421 CVE-2006-0425 CVE-2006-0432 CVE-2006-0424 CVE-2006-0427 CVE-2006-0430 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jan 23 2006 12:00AM |
| Updated: | Feb 20 2008 04:15PM |
| Credit: | These issues were disclosed by the vendor. |
| Vulnerable: |
BEA Systems WebLogic Server for Win32 8.1 SP 5 BEA Systems WebLogic Server for Win32 8.1 SP 4 BEA Systems WebLogic Server for Win32 8.1 SP 3 BEA Systems WebLogic Server for Win32 8.1 SP 2 BEA Systems WebLogic Server for Win32 8.1 SP 1 BEA Systems WebLogic Server for Win32 8.1 BEA Systems WebLogic Server for Win32 7.0 .0.1 SP 2 BEA Systems WebLogic Server for Win32 7.0 .0.1 SP 1 BEA Systems WebLogic Server for Win32 7.0 .0.1 BEA Systems WebLogic Server for Win32 7.0 SP 6 BEA Systems WebLogic Server for Win32 7.0 SP 5 BEA Systems WebLogic Server for Win32 7.0 SP 4 BEA Systems WebLogic Server for Win32 7.0 SP 3 BEA Systems WebLogic Server for Win32 7.0 SP 2 BEA Systems WebLogic Server for Win32 7.0 SP 1 BEA Systems WebLogic Server for Win32 7.0 BEA Systems WebLogic Server for Win32 6.1 SP 7 BEA Systems WebLogic Server for Win32 6.1 SP 6 BEA Systems WebLogic Server for Win32 6.1 SP 5 BEA Systems WebLogic Server for Win32 6.1 SP 4 BEA Systems WebLogic Server for Win32 6.1 SP 3 BEA Systems WebLogic Server for Win32 6.1 SP 2 BEA Systems WebLogic Server for Win32 6.1 SP 1 BEA Systems WebLogic Server for Win32 6.1 BEA Systems WebLogic Server for Win32 9.0 BEA Systems Weblogic Server 8.1 SP 5 BEA Systems Weblogic Server 8.1 SP 4 BEA Systems Weblogic Server 8.1 SP 3 BEA Systems Weblogic Server 8.1 SP 2 BEA Systems Weblogic Server 8.1 SP 1 BEA Systems Weblogic Server 8.1 BEA Systems Weblogic Server 7.0 .0.1 SP 4 BEA Systems Weblogic Server 7.0 .0.1 SP 3 BEA Systems Weblogic Server 7.0 .0.1 SP 2 BEA Systems Weblogic Server 7.0 .0.1 SP 1 BEA Systems Weblogic Server 7.0 .0.1 BEA Systems Weblogic Server 7.0 SP 6 BEA Systems Weblogic Server 7.0 SP 5 BEA Systems Weblogic Server 7.0 SP 4 BEA Systems Weblogic Server 7.0 SP 3 BEA Systems Weblogic Server 7.0 SP 2 BEA Systems Weblogic Server 7.0 SP 1 BEA Systems Weblogic Server 7.0 BEA Systems Weblogic Server 6.1 SP6 BEA Systems Weblogic Server 6.1 SP 7 BEA Systems Weblogic Server 6.1 SP 5 BEA Systems Weblogic Server 6.1 SP 4 BEA Systems Weblogic Server 6.1 SP 3 BEA Systems Weblogic Server 6.1 SP 2 BEA Systems Weblogic Server 6.1 SP 1 BEA Systems Weblogic Server 6.1 BEA Systems Weblogic Server 9.0 BEA Systems WebLogic Portal 8.1 SP4 BEA Systems WebLogic Portal 8.1 SP3 BEA Systems WebLogic Express 7.0 .0.1 SP 4 BEA Systems WebLogic Express 7.0 .0.1 SP 3 BEA Systems WebLogic Express 7.0 .0.1 SP 2 BEA Systems WebLogic Express 7.0 .0.1 SP 1 BEA Systems WebLogic Express 7.0 .0.1 BEA Systems WebLogic Express 7.0 SP 7 BEA Systems WebLogic Express 7.0 SP 6 BEA Systems WebLogic Express 7.0 SP 5 BEA Systems WebLogic Express 7.0 SP 4 BEA Systems WebLogic Express 7.0 SP 3 BEA Systems WebLogic Express 7.0 SP 2 BEA Systems WebLogic Express 7.0 SP 1 BEA Systems WebLogic Express 7.0 BEA Systems WebLogic Express 6.1 SP6 BEA Systems WebLogic Express 6.1 SP 8 BEA Systems WebLogic Express 6.1 SP 7 BEA Systems WebLogic Express 6.1 SP 5 BEA Systems WebLogic Express 6.1 SP 4 BEA Systems WebLogic Express 6.1 SP 3 BEA Systems WebLogic Express 6.1 SP 2 BEA Systems WebLogic Express 6.1 SP 1 BEA Systems WebLogic Express 6.1 |
| Not Vulnerable: | |
Discussion
BEA WebLogic Multiple Vulnerabilities
BEA has released 10 advisories identifying various vulnerabilities affecting BEA WebLogic Server, WebLogic Portal, and WebLogic Express. These issues present remote and local threats and may facilitate attacks affecting the integrity, confidentiality, and availability of vulnerable computers.
BEA has released 10 advisories identifying various vulnerabilities affecting BEA WebLogic Server, WebLogic Portal, and WebLogic Express. These issues present remote and local threats and may facilitate attacks affecting the integrity, confidentiality, and availability of vulnerable computers.
Exploit / POC
BEA WebLogic Multiple Vulnerabilities
Currently we are not aware of any exploits for these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution / Fix
BEA WebLogic Multiple Vulnerabilities
Solution:
The vendor has released updates to address these issues. Consult the referenced advisories for details on obtaining the appropriate updates.
BEA has replaced advisory BEA06-114.00 with BEA06-114.01 to report that Service Pack 5 is not vulnerable to the issue described in the advisory. Please see the references for more information.
BEA has replaced advisory BEA06-110.00 with BEA08-110.01.
BEA Systems Weblogic Server 9.0
BEA Systems WebLogic Server for Win32 9.0
BEA Systems WebLogic Express 6.1 SP 7
BEA Systems WebLogic Server for Win32 6.1 SP 7
BEA Systems Weblogic Server 6.1 SP 7
BEA Systems Weblogic Server 7.0 SP 6
BEA Systems WebLogic Express 7.0 SP 6
BEA Systems WebLogic Server for Win32 7.0 SP 6
BEA Systems Weblogic Server 8.1 SP 5
BEA Systems WebLogic Server for Win32 8.1 SP 5
Solution:
The vendor has released updates to address these issues. Consult the referenced advisories for details on obtaining the appropriate updates.
BEA has replaced advisory BEA06-114.00 with BEA06-114.01 to report that Service Pack 5 is not vulnerable to the issue described in the advisory. Please see the references for more information.
BEA has replaced advisory BEA06-110.00 with BEA08-110.01.
BEA Systems Weblogic Server 9.0
-
BEA Systems CR241234_900.jar
ftp://ftpna.bea.com/pub/releases/security/CR241234_900.jar
BEA Systems WebLogic Server for Win32 9.0
-
BEA Systems CR241234_900.jar
ftp://ftpna.bea.com/pub/releases/security/CR241234_900.jar
BEA Systems WebLogic Express 6.1 SP 7
-
BEA Systems CR198548_61sp7-v2.jar
ftp://ftpna.beasys.com/pub/releases/security/CR198548_61sp7-v2.jar
BEA Systems WebLogic Server for Win32 6.1 SP 7
-
BEA Systems CR198548_61sp7-v2.jar
ftp://ftpna.beasys.com/pub/releases/security/CR198548_61sp7-v2.jar
BEA Systems Weblogic Server 6.1 SP 7
-
BEA Systems CR198548_61sp7-v2.jar
ftp://ftpna.beasys.com/pub/releases/security/CR198548_61sp7-v2.jar
BEA Systems Weblogic Server 7.0 SP 6
-
BEA Systems CR198548_70sp6-v2.jar
ftp://ftpna.beasys.com/pub/releases/security/CR198548_70sp6-v2.jar -
BEA Systems CR241234_700sp6.jar
ftp://ftpna.bea.com/pub/releases/security/CR241234_700sp6.jar
BEA Systems WebLogic Express 7.0 SP 6
-
BEA Systems CR198548_70sp6-v2.jar
ftp://ftpna.beasys.com/pub/releases/security/CR198548_70sp6-v2.jar -
BEA Systems CR241234_700sp6.jar
ftp://ftpna.bea.com/pub/releases/security/CR241234_700sp6.jar
BEA Systems WebLogic Server for Win32 7.0 SP 6
-
BEA Systems CR198548_70sp6-v2.jar
ftp://ftpna.beasys.com/pub/releases/security/CR198548_70sp6-v2.jar -
BEA Systems CR241234_700sp6.jar
ftp://ftpna.bea.com/pub/releases/security/CR241234_700sp6.jar
BEA Systems Weblogic Server 8.1 SP 5
-
BEA Systems CR241234_810sp5.jar
ftp://ftpna.beasys.com/pub/releases/security/CR241234_810sp5.jar
BEA Systems WebLogic Server for Win32 8.1 SP 5
-
BEA Systems CR241234_810sp5.jar
ftp://ftpna.beasys.com/pub/releases/security/CR241234_810sp5.jar
References
BEA WebLogic Multiple Vulnerabilities
References:
References:
- Security Advisory: (BEA06-108.00) (BEA Systems)
- Security Advisory: (BEA06-109.00) (BEA Systems)
- Security Advisory: (BEA06-110.00) (BEA Systems)
- Security Advisory: (BEA06-111.00) (BEA Systems)
- Security Advisory: (BEA06-111.01) (BEA Systems)
- Security Advisory: (BEA06-112.00) (BEA Systems)
- Security Advisory: (BEA06-113.00) (BEA Systems)
- Security Advisory: (BEA06-114.00) (BEA Systems)
- Security Advisory: (BEA06-114.01) (BEA Systems)
- Security Advisory: (BEA06-115.00) (BEA Systems)
- Security Advisory: (BEA06-116.00) (BEA Systems)
- Security Advisory: (BEA06-117.00) (BEA Systems)
- Security Advisory: (BEA06-118.00) (BEA Systems)
- Security Advisory: (BEA06-119.00) (BEA Systems)
- Weblogic (BEA Systems)
- WebLogic Portal Product Page (BEA Systems)
- WebLogic Server Product Homepage (Oracle)
- Security Advisory (BEA08-110.01) (BEA)