CVE-2007-0424: Medium severity Bea WebLogic Server vulnerability

Published Jan 23, 2007

Updated

Unspecified vulnerability in the BEA WebLogic Server proxy plug-in for Netscape Enterprise Server before September 2006 for Netscape Enterprise Server allow remote attackers to cause a denial of service via certain requests that trigger errors that lead to a server being marked as unavailable, hosting web server failure, or CPU consumption.

Affected Software

1 affected component

Bea WebLogic Server

Remediation

Patch Available

http://dev2dev.bea.com/pub/advisory/219

Event History

Jan 23, 2007

CVE Published

12:28 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0424?

CVE-2007-0424 has a high severity rating due to its potential to cause a denial of service.

How do I fix CVE-2007-0424?

To mitigate CVE-2007-0424, it is recommended to update to a patched version of the BEA WebLogic Server.

Who is affected by CVE-2007-0424?

CVE-2007-0424 affects users of the BEA WebLogic Server proxy plug-in for Netscape Enterprise Server prior to September 2006.

What types of attacks can exploit CVE-2007-0424?

CVE-2007-0424 can be exploited through specially crafted requests that trigger errors, leading to denial of service.

Is CVE-2007-0424 still a risk today?

CVE-2007-0424 may still present a risk for organizations that have not updated their WebLogic Server installations.