BEA系统WebLogic多个密码存储漏洞

漏洞信息详情

BEA系统WebLogic多个密码存储漏洞

• CNNVD编号：CNNVD-200312-366
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2003-1226
  
• 漏洞类型：
  
  
  设计错误
  
• 发布时间：
  
  2003-12-31
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2006-01-25
  
• 厂        商：
  
  bea
• 漏洞来源：
  Vulnerability anno…

BEA WebLogic Server和Express 7.0版本以及7.0.0.1版本在config.xml、filerealm.properties和weblogic-rar.xml中不安全地存储某些含关于密码加密术的隐私，本地用户可以得知那些隐私以及解码。

BEA has made fixes available which require upgrading to a minimum of Service Pack 2 of the respective release train.
BEA Systems WebLogic Express 7.0 SP 2

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Server for Win32 7.0 SP 1

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Server for Win32 7.0 .0.1

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express for Win32 7.0 .0.1 SP 1

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Server for Win32 7.0

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express 7.0 .0.1

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems Weblogic Server 7.0 .0.1 SP 2

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express for Win32 7.0 SP 1

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express 7.0 .0.1 SP 2

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express for Win32 7.0

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems Weblogic Server 7.0 .0.1

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express for Win32 7.0 .0.1

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express 7.0 .0.1 SP 1

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems Weblogic Server 7.0 .0.1 SP 1

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express 7.0

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Server for Win32 7.0 .0.1 SP 2

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express for Win32 7.0 SP 2

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems Weblogic Server 7.0 SP 2

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Server for Win32 7.0 .0.1 SP 1

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems Weblogic Server 7.0 SP 1

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express for Win32 7.0 .0.1 SP 2

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Server for Win32 7.0 SP 2

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems Weblogic Server 7.0

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

BEA Systems WebLogic Express 7.0 SP 1

• BEA Systems CR104520_700sp2.zip
  ftp://ftpna.beasys.com/pub/releases/security/CR104520_700sp2.zip

来源: BID
名称: 7587
链接:http://www.securityfocus.com/bid/7587

来源: BID
名称: 7563
链接:http://www.securityfocus.com/bid/7563

来源: BEA
名称: BEA03-30.00
链接:http://dev2dev.bea.com/pub/advisory/22