Vulnerability CVE-2007-0425
Published: 2007-01-22   Modified: 2012-02-12

Description:
Unspecified vulnerability in BEA WebLogic Platform and Server 8.1 through 8.1 SP5, and JRockit 1.4.2 R4.5 and earlier, allows attackers to gain privileges via unspecified vectors, related to an "overflow condition," probably a buffer overflow.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
BEA -> Jrockit 
BEA -> Weblogic server 

 References:
http://www.vupen.com/english/advisories/2007/0213
http://securitytracker.com/id?1017525
http://secunia.com/advisories/23750
http://osvdb.org/38515
http://dev2dev.bea.com/pub/advisory/222
Copyright 2024, cxsecurity.com

 

Back to Top