CVE-2000-0684
BEA WebLogic 5.1.x - Unauthenticated Remote Code Execution via JSPServlet
Title source: manualExploitation Summary
EIP tracks 1 public exploit for CVE-2000-0684. PoCs published by Brian Carrier.
AI-analyzed exploit summary This exploit decrypts weakly encrypted NetZero credentials stored in 'jnetz.prop' using a substitution cipher. It reads the encrypted password and user ID, then applies a predefined decryption table to recover the plaintext password.
Description
BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.
Exploits (1)
This exploit decrypts weakly encrypted NetZero credentials stored in 'jnetz.prop' using a substitution cipher. It reads the encrypted password and user ID, then applies a predefined decryption table to recover the plaintext password.