CVE-2002-0106 BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name.
MediumCVSS 5.0
EPSS 7.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bea weblogic server | = 6.1 | No fix listed |
| bea weblogic server | = 6.1-sp1 | No fix listed |
References
- 20020108 KPMG-2002003: Bea Weblogic DOS-device Denial of Service mailing-list
- weblogic-dos-jsp-dos(7808) patch vdb-entry vendor-advisory
- 3816 patch vdb-entry vendor-advisory