Description
The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster, which allows remote attackers to cause a denial of service (cluster slowdown) via modified cookies.
References
- 15486 third-party-advisory
- ADV-2005-0606 vdb-entry
- 1014049 vdb-entry
- 13717 vdb-entry
- BEA05-79.00 vendor-advisory