CVE-2006-0419 - BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections

Back Back to CVE browser

MEDIUM

BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections

Published Jan 25, 2006

6.4

MEDIUM

CVSS 2.0

EPSS 2.39%

Description

BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://dev2dev.bea.com/pub/advisory/163
vendor-advisoryx_refsource_BEAExploitVendor Advisory
http://securitytracker.com/id?1015528
vdb-entryx_refsource_SECTRACKPatch

Link	Providers	Tags
http://dev2dev.bea.com/pub/advisory/163		vendor-advisoryx_refsource_BEAExploitVendor Advisory
http://securitytracker.com/id?1015528		vdb-entryx_refsource_SECTRACKPatch

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 25, 2006

Updated Aug 7, 2024

Reserved Jan 25, 2006

Link CVE-2006-0419

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-0419

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-0419