Nessus Plugin #11486

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

WebLogic management servlet

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2003 Michel Arboi

Summary:

Checks the version of WebLogic

Version:

$Revision: 1.5 $

Cve_id:

-

Bugtraq_id:

7122, 7124, 7130, 7131

Xrefs:

-

Description:

The remote web server is WebLogic

An internal management servlet which does not properly
check user credential can be accessed from outside, allowing
a cracker to change user passwords, and even upload or download
any file on the remote server.

In addition to this, there is a flaw in WebLogic 7.0 which may
allow users to delete empty subcontexts.

*** Note that Nessus only checked the version in the server banner
*** So this might be a false positive.

See also : http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-28.jsp

Solutions :
- apply Service Pack 2 Rolling Patch 3 on WebLogic 6.0
- apply Service Pack 4 on WebLogic 6.1
- apply Service Pack 2 on WebLogic 7.0 or 7.0.0.1

Risk factor : High