CVE-2002-1030: Race Condition
Published Oct 4, 2002
·Updated
Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attackers to cause a denial of service (crash) via a flood of data and connections.
Affected Software
40 affected components
Bea WebLogic Server=5.1-sp11
Bea WebLogic Server=5.1-sp7
Bea WebLogic Server=6.1
Bea WebLogic Server=5.1-sp8
Bea WebLogic Server=5.1-sp2
Bea WebLogic Server=6.0-sp1
Bea WebLogic Server=5.1-sp5
Bea WebLogic Server=6.1-sp1
Bea WebLogic Server=6.0
Bea WebLogic Server=6.0-sp2
Bea WebLogic Server=5.1-sp12
Bea WebLogic Server=5.1
Bea WebLogic Server=6.0-sp2
Bea WebLogic Server=6.1-sp3
Bea WebLogic Server=5.1-sp1
Bea WebLogic Server=5.1-sp6
Bea WebLogic Server=6.1-sp1
Bea WebLogic Server=6.0
Bea WebLogic Server=5.1-sp4
Bea WebLogic Server=5.1-sp3
Bea WebLogic Server=5.1-sp8
Bea WebLogic Server=5.1-sp9
Bea WebLogic Server=5.1-sp10
Bea WebLogic Server=6.1
Bea WebLogic Server=6.0-sp1
Bea WebLogic Server=5.1-sp3
Bea WebLogic Server=6.1-sp2
Bea WebLogic Server=5.1-sp5
Bea WebLogic Server=5.1-sp9
Bea WebLogic Server=5.1-sp12
Bea WebLogic Server=6.1-sp3
Bea WebLogic Server=5.1-sp1
Bea WebLogic Server=5.1
Bea WebLogic Server=5.1-sp6
Bea WebLogic Server=6.1-sp2
Bea WebLogic Server=7.0
Bea WebLogic Server=5.1-sp10
Bea WebLogic Server=5.1-sp7
Bea WebLogic Server=5.1-sp4
Bea WebLogic Server=5.1-sp2
Remediation
Patch Available
Patch Available
Event History
Oct 4, 2002
CVE Published
04:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1030?
CVE-2002-1030 has a severity rating of high due to its potential to cause a denial of service.
2
How do I fix CVE-2002-1030?
To fix CVE-2002-1030, it is recommended to apply the latest security patches provided by BEA WebLogic Server.
3
Which versions of Oracle WebLogic Server are affected by CVE-2002-1030?
CVE-2002-1030 affects Oracle WebLogic Server versions 5.1.x, 6.0.x, 6.1.x, and 7.0.
4
What type of attack does CVE-2002-1030 facilitate?
CVE-2002-1030 facilitates a denial of service attack via a flood of data and connections.
5
Is CVE-2002-1030 still a relevant issue today?
While CVE-2002-1030 is quite old, systems running the affected versions may still be vulnerable if not updated.