Secunia
Login
|
|
CVE Reference: CVE-2008-0901 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2008-0901 |
|
|
Description: BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not. |
|
|
CVE Status: Candidate |
|
|
References: ST 1019449 SAID Secunia Advisory: SA29041 MISC http://www.s21sec.com/avisos/s21sec-040-en.txt BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/488686/100/0/threaded BEA http://dev2dev.bea.com/pub/advisory/271 |
|
| Return to the previous page. |
