CVE-2005-1748

First published: Tue May 24 2005(Updated: )

The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-historical
• collector/nvd-index
• agent/severity
• agent/references
• agent/author
• agent/weakness
• agent/event
• agent/description
• agent/last-modified-date
• agent/softwarecombine
• agent/type
• agent/first-publish-date
• agent/tags
• collector/mitre-cve
• source/MITRE
• vendor/bea
• canonical/bea weblogic server
• version/bea weblogic server/8.1
• version/bea weblogic server/8.1-sp4
• version/bea weblogic server/7.0-sp2
• version/bea weblogic server/7.0.0.1-sp4
• version/bea weblogic server/6.1-sp4
• version/bea weblogic server/6.1
• version/bea weblogic server/6.1-sp5
• version/bea weblogic server/6.0-sp1
• version/bea weblogic server/6.1-sp6
• version/bea weblogic server/7.0-sp4
• version/bea weblogic server/6.1-sp1
• version/bea weblogic server/7.0
• version/bea weblogic server/6.0
• version/bea weblogic server/7.0.0.1-sp1
• version/bea weblogic server/6.0-sp2
• version/bea weblogic server/6.1-sp3
• version/bea weblogic server/7.0-sp3
• version/bea weblogic server/8.1-sp1
• version/bea weblogic server/6.1-sp2
• version/bea weblogic server/8.1-sp3
• version/bea weblogic server/7.0.0.1
• version/bea weblogic server/7.0-sp5
• version/bea weblogic server/8.1-sp2
• version/bea weblogic server/7.0.0.1-sp3
• version/bea weblogic server/7.0-sp1
• version/bea weblogic server/7.0.0.1-sp2
• vendor/oracle
• canonical/oracle weblogic portal
• version/oracle weblogic portal/8.0