National Vulnerability Database (CVE-2001-0098)

National Cyber-Alert System Vulnerability Summary: CVE-2001-0098
Orirignal release date: 2001-02-12 Source: US-CERT/NIST ### Overview Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a &quot;..&quot; string. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input buffer="1" Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: Bugtraq Name: BUGTRAQ:20001219 def-2000-04: Bea WebLogic Server dotdot-overflow Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2000-12/0331.html External Source: Security Focus Name: bid 2138 Hyperlink: http://www.securityfocus.com/bid/2138 External Source: ISS X-Force Name: weblogic-dot-bo Hyperlink: http://xforce.iss.net/static/5782.php ### Vulnerable Software and Vendor Weblogic Server (BEA Systems) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0098