CVE-2007-4618: High severity bea weblogic server vulnerability
Published Aug 31, 2007
·Updated
Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP headers.
Affected Software
16 affected components
Bea WebLogic Server=6.0
Bea WebLogic Server=6.1-sp1
Bea WebLogic Server=6.1-sp2
Bea WebLogic Server=6.1-sp3
Bea WebLogic Server=6.1-sp4
Bea WebLogic Server=6.1-sp5
Bea WebLogic Server=6.1-sp6
Bea WebLogic Server=6.1-sp7
Bea WebLogic Server=7.0
Bea WebLogic Server=7.0-sp1
Bea WebLogic Server=7.0-sp2
Bea WebLogic Server=7.0-sp3
Bea WebLogic Server=7.0-sp4
Bea WebLogic Server=7.0-sp5
Bea WebLogic Server=7.0-sp6
Bea WebLogic Server=7.0-sp7
Remediation
Patch Available
Event History
Aug 31, 2007
CVE Published
12:17 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4618?
CVE-2007-4618 is classified as a denial of service vulnerability, primarily affecting BEA WebLogic Server.
2
How do I fix CVE-2007-4618?
To mitigate CVE-2007-4618, update to the latest patched version of BEA WebLogic Server that addresses this vulnerability.
3
Which versions of BEA WebLogic Server are affected by CVE-2007-4618?
CVE-2007-4618 affects BEA WebLogic Server versions 6.1 up to SP7 and 7.0 up to SP7.
4
What type of attack is associated with CVE-2007-4618?
CVE-2007-4618 allows remote attackers to cause disk consumption through malformed HTTP headers.
5
Can CVE-2007-4618 be exploited remotely?
Yes, CVE-2007-4618 can be exploited remotely by attackers sending crafted HTTP requests.