CVE-2005-1748

The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-05-24

Last modified

2024-08-07

Affected products

• Weblogic Server (Bea)
• Weblogic Portal (Oracle)

References

• http://dev2dev.bea.com/pub/advisory/131
• http://secunia.com/advisories/15486
• http://securitytracker.com/id?1014049
• http://www.securityfocus.com/bid/13717
• http://www.vupen.com/english/advisories/2005/0608