BEA WebLogic密钥库清除文本密码存储漏洞

漏洞信息详情

BEA WebLogic密钥库清除文本密码存储漏洞

• CNNVD编号：CNNVD-200312-367
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2003-1437
  
• 漏洞类型：
  
  
  设计错误
  
• 发布时间：
  
  2003-12-31
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2003-12-31
  
• 厂        商：
  
  redhat
• 漏洞来源：
  Vulnerability anno…

BEA WebLogic Express以及WebLogic Server 7.0版本和7.0.0.1版本，在密钥库被用来存储私钥或信托证书权限时在明文中储存密码，本地用户可以获得权限。

BEA has made fixes available. These fixes require upgrading to Service Pack 1 of the respective release chain prior to patch application. See the vendor web page reference for more details.
BEA Systems WebLogic Server for Win32 7.0 SP 1

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems WebLogic Server for Win32 7.0 .0.1

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems WebLogic Express for Win32 7.0 .0.1 SP 1

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems WebLogic Server for Win32 7.0

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems WebLogic Express 7.0 .0.1

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems WebLogic Express for Win32 7.0 SP 1

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems Weblogic Server 7.0 .0.1

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems WebLogic Express for Win32 7.0

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems WebLogic Express for Win32 7.0 .0.1

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems WebLogic Express 7.0 .0.1 SP 1

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems Weblogic Server 7.0 .0.1 SP 1

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems WebLogic Express 7.0

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems WebLogic Server for Win32 7.0 .0.1 SP 1

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems Weblogic Server 7.0 SP 1

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems Weblogic Server 7.0

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

BEA Systems WebLogic Express 7.0 SP 1

• BEA Systems CR091911_70sp1.jar
  ftp://ftpna.beasys.com/pub/releases/security/CR091911_70sp1.jar

来源: BEA
名称: BEA03-25.00
链接:http://dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-25.jsp

来源: XF
名称: weblogic-keystore-plaintext-passwords(11220)
链接:http://xforce.iss.net/xforce/xfdb/11220

来源: BID
名称: 6719
链接:http://www.securityfocus.com/bid/6719