CVE-2003-0621

Published: Dec 1, 2003Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.

Affected (9)

Products: Bea: Tuxedo, Weblogic Server

2 products

Weblogic Server

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Bea Tuxedo	Version 6.3
Bea Tuxedo	Version 6.4
Bea Tuxedo	Version 6.5
Bea Tuxedo	Version 7.1
Bea Tuxedo	Version 8.0
Bea Tuxedo	Version 8.1
Bea Weblogic Server	Version 4.2
Bea Weblogic Server	Version 5.0.1
Bea Weblogic Server	Version 5.1

References (8)

http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/advisory03_38_00.jsp

Source: cve@mitre.org

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=106762000607681&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/8931

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/13559

Source: cve@mitre.org

http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/advisory03_38_00.jsp

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=106762000607681&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/8931

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/13559

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.