Описание
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such as CON and AUX.
Ссылки
- PatchVendor Advisory
- ExploitPatchVendor Advisory
- PatchVendor Advisory
- ExploitPatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:bea:tuxedo:6.3:*:*:*:*:*:*:*
cpe:2.3:a:bea:tuxedo:6.4:*:*:*:*:*:*:*
cpe:2.3:a:bea:tuxedo:6.5:*:*:*:*:*:*:*
cpe:2.3:a:bea:tuxedo:7.1:*:*:*:*:*:*:*
cpe:2.3:a:bea:tuxedo:8.0:*:*:*:*:*:*:*
cpe:2.3:a:bea:tuxedo:8.1:*:*:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:4.2:*:enterprise:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:5.0.1:*:enterprise:*:*:*:*:*
cpe:2.3:a:bea:weblogic_server:5.1:*:enterprise:*:*:*:*:*
EPSS
Процентиль: 73%
0.00776
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such as CON and AUX.
EPSS
Процентиль: 73%
0.00776
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other