CVE-2006-0419: Medium severity Bea WebLogic Server vulnerability
BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0419?
CVE-2006-0419 has been classified as a high severity vulnerability due to the potential for unauthorized access and denial of service.
How do I fix CVE-2006-0419?
To fix CVE-2006-0419, upgrade to a patched version of Oracle WebLogic Server that addresses this vulnerability.
Which versions of WebLogic Server are affected by CVE-2006-0419?
CVE-2006-0419 affects Oracle WebLogic Server versions 7.0 SP1 to SP6, 8.1 SP1 to SP5, and 9.0.
What type of attacks can be carried out due to CVE-2006-0419?
CVE-2006-0419 can allow remote attackers to read user entries or cause denial of service through a large number of connections.
Are anonymous binds enabled by default in affected versions of WebLogic Server for CVE-2006-0419?
Yes, the affected versions of WebLogic Server allow anonymous binds to the embedded LDAP server by default.