CVE-2001-0098 Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string.
HighCVSS 10.0
EPSS 78.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bea weblogic server | <= 4.5.2 | No fix listed |
References
- 20001219 def-2000-04: Bea WebLogic Server dotdot-overflow exploit mailing-list patch
- 2138 exploit patch vdb-entry vendor-advisory
- weblogic-dot-bo(5782) vdb-entry