critical10.0Public exploit code
CVE-2001-0098
Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BEA Systems WebLogic Server 4.0 x/4.5 x/5.1 x - Double Dot Buffer Overflow2000-12-19 · remote · multiple · Verified
Impact
Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bea | Weblogic Server | through 4.5.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0331.html
- http://www.securityfocus.com/bid/2138
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5782
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0331.html
- http://www.securityfocus.com/bid/2138
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5782