CVE-2006-0419 | BDVDB-2026-14816 Detail

Description#

BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securitytracker.com/id?1015528
http://dev2dev.bea.com/pub/advisory/163

Exploit#

No public exploit known

History#

Version 12006-01-25Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.