Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

HTTP:STC:VULN:WEBLOGIC-8-1

Severity

Info

Recommended

No

Category

HTTP

Keywords

Vulnerable BEA Weblogic version ( < 8.1)

Release Date

2005/01/14

Update Number

1213

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

HTTP: Vulnerable BEA Weblogic version ( < 8.1)


This signature detects BEA Weblogic server 8.1 SP2 and earlier versions. These versions have multiple vulnerabilities that enable unauthorized access to a remote host.

Extended Description

BEA Systems has released advisories to address multiple vulnerabilities in WebLogic Server and Express. These issues may permit unauthorized access, information disclosure, or pose threats to role and policy security.

Affected Products

  • BEA Systems WebLogic Express 6.1.0
  • BEA Systems WebLogic Express 6.1.0 SP 1
  • BEA Systems WebLogic Express 6.1.0 SP 2
  • BEA Systems WebLogic Express 6.1.0 SP 3
  • BEA Systems WebLogic Express 6.1.0 SP 4
  • BEA Systems WebLogic Express 6.1.0 SP 5
  • BEA Systems WebLogic Express 6.1.0 SP6
  • BEA Systems WebLogic Express 7.0.0
  • BEA Systems WebLogic Express 7.0.0 SP 1
  • BEA Systems WebLogic Express 7.0.0 SP 2
  • BEA Systems WebLogic Express 7.0.0 SP 3
  • BEA Systems WebLogic Express 7.0.0 SP 4
  • BEA Systems WebLogic Express 7.0.0 SP 5
  • BEA Systems WebLogic Express 8.1.0
  • BEA Systems WebLogic Express 8.1.0 SP 1
  • BEA Systems WebLogic Express 8.1.0 SP 2
  • BEA Systems WebLogic Express for Win32 6.1.0
  • BEA Systems WebLogic Express for Win32 6.1.0 SP 1
  • BEA Systems WebLogic Express for Win32 6.1.0 SP 2
  • BEA Systems WebLogic Express for Win32 6.1.0 SP 3
  • BEA Systems WebLogic Express for Win32 6.1.0 SP 4
  • BEA Systems WebLogic Express for Win32 6.1.0 SP 5
  • BEA Systems WebLogic Express for Win32 6.1.0 SP 6
  • BEA Systems WebLogic Express for Win32 7.0.0
  • BEA Systems WebLogic Express for Win32 7.0.0 SP 1
  • BEA Systems WebLogic Express for Win32 7.0.0 SP 2
  • BEA Systems WebLogic Express for Win32 7.0.0 SP 3
  • BEA Systems WebLogic Express for Win32 7.0.0 SP 4
  • BEA Systems WebLogic Express for Win32 7.0.0 SP 5
  • BEA Systems WebLogic Express for Win32 8.1.0
  • BEA Systems WebLogic Express for Win32 8.1.0 SP 1
  • BEA Systems WebLogic Express for Win32 8.1.0 SP 2
  • BEA Systems Weblogic Server 6.1.0
  • BEA Systems Weblogic Server 6.1.0 SP 1
  • BEA Systems Weblogic Server 6.1.0 SP 2
  • BEA Systems Weblogic Server 6.1.0 SP 3
  • BEA Systems Weblogic Server 6.1.0 SP 4
  • BEA Systems Weblogic Server 6.1.0 SP 5
  • BEA Systems Weblogic Server 6.1.0 SP6
  • BEA Systems Weblogic Server 7.0.0
  • BEA Systems Weblogic Server 7.0.0 SP 1
  • BEA Systems Weblogic Server 7.0.0 SP 2
  • BEA Systems Weblogic Server 7.0.0 SP 3
  • BEA Systems Weblogic Server 7.0.0 SP 4
  • BEA Systems Weblogic Server 7.0.0 SP 5
  • BEA Systems Weblogic Server 8.1.0
  • BEA Systems Weblogic Server 8.1.0 SP 1
  • BEA Systems Weblogic Server 8.1.0 SP 2
  • BEA Systems WebLogic Server for Win32 6.1.0
  • BEA Systems WebLogic Server for Win32 6.1.0 SP 1
  • BEA Systems WebLogic Server for Win32 6.1.0 SP 2
  • BEA Systems WebLogic Server for Win32 6.1.0 SP 3
  • BEA Systems WebLogic Server for Win32 6.1.0 SP 4
  • BEA Systems WebLogic Server for Win32 6.1.0 SP 5
  • BEA Systems WebLogic Server for Win32 6.1.0 SP 6
  • BEA Systems WebLogic Server for Win32 7.0.0
  • BEA Systems WebLogic Server for Win32 7.0.0 SP 1
  • BEA Systems WebLogic Server for Win32 7.0.0 SP 2
  • BEA Systems WebLogic Server for Win32 7.0.0 SP 3
  • BEA Systems WebLogic Server for Win32 7.0.0 SP 4
  • BEA Systems WebLogic Server for Win32 7.0.0 SP 5
  • BEA Systems WebLogic Server for Win32 8.1.0
  • BEA Systems WebLogic Server for Win32 8.1.0 SP 1
  • BEA Systems WebLogic Server for Win32 8.1.0 SP 2

References

  • BugTraq: 11168
  • CVE: CVE-2004-2320
  • URL: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04-65.00.jsp

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out