漏洞信息详情

BEA系统WebLogic多个密码存储漏洞

• CNNVD编号：CNNVD-200312-351
• 危害等级： 低危
  
• CVE编号： CVE-2003-1225
• 漏洞类型： 设计错误
• 发布时间： 2003-12-31
• 威胁类型： 本地
• 更新时间： 2005-10-20
• 厂        商： bea
• 漏洞来源： Vulnerability anno...

漏洞简介

BEA WebLogic Server以及Express 7.0版本和7.0.0.1版本的默认CredentialMapper将密码以明文形式储存在磁盘中，本地用户可以借助该漏洞提取密码。

漏洞公告

BEA has made fixes available which require upgrading to a minimum of Service Pack 2 of the respective release train. BEA Systems WebLogic Express 7.0 SP 2

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Server for Win32 7.0 SP 1

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Server for Win32 7.0 .0.1

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express for Win32 7.0 .0.1 SP 1

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Server for Win32 7.0

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express 7.0 .0.1

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems Weblogic Server 7.0 .0.1 SP 2

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express for Win32 7.0 SP 1

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express 7.0 .0.1 SP 2

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express for Win32 7.0

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems Weblogic Server 7.0 .0.1

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express for Win32 7.0 .0.1

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express 7.0 .0.1 SP 1

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems Weblogic Server 7.0 .0.1 SP 1

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express 7.0

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Server for Win32 7.0 .0.1 SP 2

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express for Win32 7.0 SP 2

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems Weblogic Server 7.0 SP 2

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Server for Win32 7.0 .0.1 SP 1

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems Weblogic Server 7.0 SP 1

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express for Win32 7.0 .0.1 SP 2

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Server for Win32 7.0 SP 2

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems Weblogic Server 7.0

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express 7.0 SP 1

• BEA Systems CR104520_700sp2.zip ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

参考网址

来源: BID 名称: 7563 链接:http://www.securityfocus.com/bid/7563 来源: BEA 名称: BEA03-30.00 链接:http://dev2dev.bea.com/pub/advisory/22

受影响实体

• Bea Weblogic_server:7.0:Sp4:Win32  
• Bea Weblogic_server:7.0:Sp2:Win32  
• Bea Weblogic_server:7.0:Sp2:Express  
• Bea Weblogic_server:7.0:Sp2  
• Bea Weblogic_server:7.0:Sp1:Win32  

补丁

暂无