CVE

Id
12952  
CVE No.
CVE-2005-1746  
Status
Candidate  
Description
The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster, which allows remote attackers to cause a denial of service (cluster slowdown) via modified cookies.  
Phase
Assigned (20050525)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
93189 12952 CVE-2005-1746 BEA:BEA05-79.00  View
93190 12952 CVE-2005-1746 URL:http://dev2dev.bea.com/pub/advisory/129  View
93191 12952 CVE-2005-1746 BID:13717  View
93192 12952 CVE-2005-1746 URL:http://www.securityfocus.com/bid/13717  View
93193 12952 CVE-2005-1746 VUPEN:ADV-2005-0606  View
93194 12952 CVE-2005-1746 URL:http://www.vupen.com/english/advisories/2005/0606  View
93195 12952 CVE-2005-1746 SECTRACK:1014049  View
93196 12952 CVE-2005-1746 URL:http://securitytracker.com/id?1014049  View
93197 12952 CVE-2005-1746 SECUNIA:15486  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62150 JVNDB-2005-000352 BEA WebLogic Server の組み込み LDAP サーバへユーザエントリ参照によるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2005-1748 12952 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000352.html  View