CVE-2007-0422: Medium severity Bea WebLogic Server vulnerability

Published Jan 23, 2007

Updated

BEA WebLogic Server 9.0, 9.1, and 9.2 Gold, when running on Solaris 9, allows remote attackers to cause a denial of service (server inaccessibility) via manipulated socket connections.

Affected Software

3 affected components

Bea WebLogic Server=9.0

Bea WebLogic Server=9.1

Bea WebLogic Server=9.2-ga

Remediation

Patch Available

http://dev2dev.bea.com/pub/advisory/217

Event History

Jan 23, 2007

CVE Published

12:28 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0422?

CVE-2007-0422 is classified as a denial of service vulnerability that can lead to server inaccessibility.

How do I fix CVE-2007-0422?

To mitigate CVE-2007-0422, it is recommended to upgrade to a patched version of Oracle WebLogic Server that is not susceptible to this vulnerability.

Which versions of WebLogic Server are affected by CVE-2007-0422?

CVE-2007-0422 affects Oracle WebLogic Server versions 9.0, 9.1, and 9.2 running on Solaris 9.

Can CVE-2007-0422 be exploited remotely?

Yes, CVE-2007-0422 allows remote attackers to exploit the vulnerability through manipulated socket connections.

What impact does CVE-2007-0422 have on the system?

The impact of CVE-2007-0422 is that it can cause a denial of service, rendering the server inaccessible to legitimate users.