BEA WebLogic Server Double Dot Buffer Overflow Vulnerability

Bugtraq ID: 2138
Class: Boundary Condition Error
CVE: CVE-2001-0098
Remote: Yes
Local: Yes
Published: Dec 19 2000 12:00AM
Updated: Jul 11 2009 04:46AM
Credit: Posted to Bugtraq on December 19, 2000 by Peter Gr√ľndl <peter.grundl@defcom.com>.
Vulnerable: BEA Systems Weblogic Server 5.1 x
- Apache Software Foundation Apache 1.3.12
- Apache Software Foundation Apache 1.3.9
- Apache Software Foundation Apache 1.3.9
- C2Net StrongHold Web Server 3.0
- HP HP-UX 11.0
- HP HP-UX 10.20
- IBM AIX 4.3
- IBM AIX 4.2
- Microsoft IIS 5.0
- Microsoft IIS 4.0
- Microsoft Windows 2000 Professional
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- RedHat Linux 5.1
- Sun Solaris 8_sparc
BEA Systems Weblogic Server 4.5 x
- HP HP-UX 11.0
- HP HP-UX 10.20
- IBM AIX 4.3
- IBM AIX 4.2
- Microsoft Windows 2000 Professional
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- RedHat Linux 5.1
- Sun Solaris 8_sparc
BEA Systems Weblogic Server 4.0 x
- HP HP-UX 11.0
- HP HP-UX 10.20
- IBM AIX 4.3
- IBM AIX 4.2
- Microsoft Windows 2000 Professional
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- RedHat Linux 5.1
- Sun Solaris 8_sparc
Not Vulnerable: BEA Systems Weblogic Server 5.1 SP 7
- Digital OpenVMS 7.1
- Digital (Compaq) TRU64/DIGITAL UNIX 5.0
- HP HP-UX 11.0
- HP HP-UX 10.20
- IBM AIX 4.3
- IBM AIX 4.2
- IBM OS/390 V2R6
- Microsoft Windows 2000 Professional
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- RedHat Linux 7.0
- SCO Unixware 7.1.1
- SGI IRIX 6.5.8
- Sun Solaris 8_sparc


 

Privacy Statement
Copyright 2010, SecurityFocus