NVD

Id
70354  
Name
CVE-2005-4765  
Description
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer command with the t3 protocol, does not use the secure t3s protocol even when an Administration port is enabled on the Administration server, which might allow remote attackers to sniff the connection.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2005-12-31  
Modified Date
2008-09-05  
Seq
2005-4765  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
362663 70354 CVE-2005-4765 BEA05-102.00  View
362664 70354 CVE-2005-4765 15052  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62382 JVNDB-2005-000584 BEA 製品において weblogic.Deployer コマンドを t3 プロトコルで管理サーバに送信可能な脆弱性 ------------ CVE-2005-4765 15967 CVE-2005-4765 70354 7.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000584.html 2005-10-10 2007-04-01 View