CVE-2005-4766
First published: Sat Dec 31 2005(Updated: )
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to read sensitive cluster synchronization messages by sniffing the multicast traffic.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| BEA Weblogic Server | =8.1 | |
| BEA Weblogic Server | =8.1-sp4 | |
| BEA Weblogic Server | =7.0-sp2 | |
| BEA Weblogic Server | =8.1 | |
| BEA Weblogic Server | =7.0-sp4 | |
| BEA Weblogic Server | =7.0 | |
| BEA Weblogic Server | =7.0-sp3 | |
| BEA Weblogic Server | =8.1-sp1 | |
| BEA Weblogic Server | =8.1-sp3 | |
| BEA Weblogic Server | =7.0-sp2 | |
| BEA Weblogic Server | =8.1-sp3 | |
| BEA Weblogic Server | =7.0-sp3 | |
| BEA Weblogic Server | =8.1 | |
| BEA Weblogic Server | =8.1-sp4 | |
| BEA Weblogic Server | =7.0-sp5 | |
| BEA Weblogic Server | =7.0-sp5 | |
| BEA Weblogic Server | =7.0-sp5 | |
| BEA Weblogic Server | =8.1-sp1 | |
| BEA Weblogic Server | =7.0-sp2 | |
| BEA Weblogic Server | =8.1-sp3 | |
| BEA Weblogic Server | =8.1-sp2 | |
| BEA Weblogic Server | =7.0-sp3 | |
| BEA Weblogic Server | =7.0-sp1 | |
| BEA Weblogic Server | =7.0-sp1 | |
| BEA Weblogic Server | =7.0-sp4 | |
| BEA Weblogic Server | =8.1-sp1 | |
| BEA Weblogic Server | =7.0-sp1 | |
| BEA Weblogic Server | =8.1-sp2 | |
| BEA Weblogic Server | =8.1-sp4 | |
| BEA Weblogic Server | =7.0 | |
| BEA Weblogic Server | =8.1-sp2 | |
| BEA Weblogic Server | =7.0 | |
| BEA Weblogic Server | =7.0-sp4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/remedy
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/bea
- canonical/bea weblogic server
- version/bea weblogic server/8.1
- version/bea weblogic server/8.1-sp4
- version/bea weblogic server/7.0-sp2
- version/bea weblogic server/7.0-sp4
- version/bea weblogic server/7.0
- version/bea weblogic server/7.0-sp3
- version/bea weblogic server/8.1-sp1
- version/bea weblogic server/8.1-sp3
- version/bea weblogic server/7.0-sp5
- version/bea weblogic server/8.1-sp2
- version/bea weblogic server/7.0-sp1