CVE-2004-0652

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp
http://secunia.com/advisories/11359
http://securitytracker.com/id?1009766
http://www.kb.cert.org/vuls/id/352110Patch, Third Party Advisory, US Government Resource
http://www.osvdb.org/5296
http://www.securityfocus.com/bid/10133Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15865
http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp
http://secunia.com/advisories/11359
http://securitytracker.com/id?1009766
http://www.kb.cert.org/vuls/id/352110Patch, Third Party Advisory, US Government Resource
http://www.osvdb.org/5296
http://www.securityfocus.com/bid/10133Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15865

Timeline

Published: Aug 6, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-06532.1Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feat CVE-2004-06542.1Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the System-Wide Adminis CVE-2004-06557.2eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary f CVE-2004-06565.0The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum numb CVE-2004-06575.0Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a dat CVE-2004-06587.2Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 al CVE-2004-065910.0Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name.CVE-2004-06606.8Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows CVE-2004-06615.0Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (I CVE-2004-06625.0PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to (1) resize.php o CVE-2004-06636.8Cross-site scripting (XSS) vulnerability in modules.php in PowerPortal 1.x allows remote attackers to inject arbitrary script or HTML via th CVE-2004-06645.0Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directories via a .. (dot dot)