Description
BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (network port consumption) via unknown actions in HTTPS sessions, which prevents the server from releasing the network port when the session ends.
References
- 10544 vdb-entry
- BEA04-61.00 vendor-advisory
- 11864 third-party-advisory
- 7076 vdb-entry
- 1010492 vdb-entry
- weblogic-ssl-dos(16419) vdb-entry