CVE-2002-1030 — Race Condition in Weblogic Server

4 documents4 sources
Severity
2.6LOWNVD
EPSS
0.7%
top 28.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
BEA Weblogic Server
Timeline
PublishedOct 4
Latest updateApr 30

Description

Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attackers to cause a denial of service (crash) via a flood of data and connections.

CVSS vector

AV:N/AC:H/C:N/I:N/A:PExploitability: 4.9 | Impact: 2.9

Affected Packages1 packages

▶NVDbea/weblogic_server4 versions+3

Patches

Patch: www.iss.net ↗Patch: www.securityfocus.com ↗Patch: www.iss.net ↗

🔴Vulnerability Details

2
GHSA
GHSA-rp5q-9wrw-84wc: Race condition in Performance Pack in BEA WebLogic Server and Express 5↗2022-04-30
▶
CVEList
CVE-2002-1030: Race condition in Performance Pack in BEA WebLogic Server and Express 5↗2003-04-02
▶

💥Exploits & PoCs

1
Exploit-DB
kicq 2.0.0b1 - Invalid ICQ Packet Denial of Service↗2002-02-02
▶
CVE-2002-1030 — Race Condition in BEA Weblogic Server | cvebase