CVEvulnerability

CVE-2005-1748

5.0 MEDIUM Published 2005-05-24 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-05-24
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.

Affected configurations

• bea weblogic server 6.0 • bea weblogic server 6.1 • bea weblogic server 7.0 • bea weblogic server 7.0.0.1 • bea weblogic server 8.1 • oracle weblogic portal 8.0

References

http://dev2dev.bea.com/pub/advisory/131 Vendor Advisory
http://secunia.com/advisories/15486 Vendor Advisory
http://securitytracker.com/id?1014049 securitytracker.com
http://www.securityfocus.com/bid/13717 www.securityfocus.com
http://www.vupen.com/english/advisories/2005/0608 www.vupen.com
http://dev2dev.bea.com/pub/advisory/131 Vendor Advisory
http://secunia.com/advisories/15486 Vendor Advisory
http://securitytracker.com/id?1014049 securitytracker.com
http://www.securityfocus.com/bid/13717 www.securityfocus.com
http://www.vupen.com/english/advisories/2005/0608 www.vupen.com