CVE-2003-0151
First published: Fri Mar 21 2003(Updated: )
BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle WebLogic Server | =7.0-sp2 | |
| Oracle WebLogic Server | =6.1-sp4 | |
| Oracle WebLogic Server | =6.1 | |
| Oracle WebLogic Server | =6.0-sp1 | |
| Oracle WebLogic Server | =6.1-sp1 | |
| Oracle WebLogic Server | =7.0 | |
| Oracle WebLogic Server | =6.0 | |
| Oracle WebLogic Server | =6.1-sp4 | |
| Oracle WebLogic Server | =7.0.0.1-sp1 | |
| Oracle WebLogic Server | =6.0-sp2 | |
| Oracle WebLogic Server | =6.0-sp2 | |
| Oracle WebLogic Server | =6.1-sp3 | |
| Oracle WebLogic Server | =6.1-sp3 | |
| Oracle WebLogic Server | =7.0.0.1-sp1 | |
| Oracle WebLogic Server | =7.0.0.1-sp2 | |
| Oracle WebLogic Server | =7.0.0.1-sp2 | |
| Oracle WebLogic Server | =6.0 | |
| Oracle WebLogic Server | =6.1-sp1 | |
| Oracle WebLogic Server | =7.0.0.1 | |
| Oracle WebLogic Server | =7.0-sp1 | |
| Oracle WebLogic Server | =7.0-sp2 | |
| Oracle WebLogic Server | =6.1 | |
| Oracle WebLogic Server | =7.0-sp1 | |
| Oracle WebLogic Server | =6.0-sp1 | |
| Oracle WebLogic Server | =6.1-sp2 | |
| Oracle WebLogic Server | =6.1-sp2 | |
| Oracle WebLogic Server | =7.0.0.1 | |
| Oracle WebLogic Server | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2003-0151?
CVE-2003-0151 has been classified with a severity level that allows remote attackers to read arbitrary files or execute arbitrary code on affected systems.
How do I fix CVE-2003-0151?
To fix CVE-2003-0151, it is recommended to apply the security patches provided by BEA for the affected versions of WebLogic Server.
Which versions are affected by CVE-2003-0151?
CVE-2003-0151 affects BEA WebLogic Server and Express versions 6.0 through 7.0 including various service packs.
What types of attacks can exploit CVE-2003-0151?
CVE-2003-0151 can be exploited to perform unauthorized access to internal servlets, allowing attackers to read sensitive files or execute arbitrary commands.
Is there any workaround for CVE-2003-0151?
One potential workaround for CVE-2003-0151 is to restrict network access to the WebLogic server, limiting exposure to internal networks only.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/bea
- canonical/oracle weblogic server
- version/oracle weblogic server/7.0-sp2
- version/oracle weblogic server/6.1-sp4
- version/oracle weblogic server/6.1
- version/oracle weblogic server/6.0-sp1
- version/oracle weblogic server/6.1-sp1
- version/oracle weblogic server/7.0
- version/oracle weblogic server/6.0
- version/oracle weblogic server/7.0.0.1-sp1
- version/oracle weblogic server/6.0-sp2
- version/oracle weblogic server/6.1-sp3
- version/oracle weblogic server/7.0.0.1-sp2
- version/oracle weblogic server/7.0.0.1
- version/oracle weblogic server/7.0-sp1
- version/oracle weblogic server/6.1-sp2