CVE-2005-1748

BEA WebLogic Server 7.0-8.1 - Unauthenticated Denial of Service via LDAP Anonymous Bind

Title source: llm

Description

The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.

References (5)

Core 5

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/15486

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2005/0608

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1014049

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/13717

Vendor Advisory vendor-advisory x_refsource_bea

http://dev2dev.bea.com/pub/advisory/131

Scores

EPSS 0.0075

EPSS Percentile 73.3%

Details

Status published

Products (4)

bea/weblogic_server 6.0 (9 CPE variants)

bea/weblogic_server 6.1 (20 CPE variants)

bea/weblogic_server 7.0 (18 CPE variants)

bea/weblogic_server 7.0.0.1 (3 CPE variants)

Published May 24, 2005

Tracked Since Feb 18, 2026