Unspecified vulnerability in the thread management in BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1, when T3 authentication is used, allows remote attackers to cause a denial of service (thread and system hang) via unspecified "sequences of events."
| Software | From | Fixed in |
|---|---|---|
| bea / weblogic_server | 8.1 | 8.1.x |
| bea / weblogic_server | 9.0 | 9.0.x |
| bea / weblogic_server | 7.0-sp4 | 7.0-sp4.x |
| bea / weblogic_server | 7.0 | 7.0.x |
| bea / weblogic_server | 7.0-sp6 | 7.0-sp6.x |
| bea / weblogic_server | 7.0-sp3 | 7.0-sp3.x |
| bea / weblogic_server | 8.1-sp5 | 8.1-sp5.x |
| bea / weblogic_server | 8.1-sp3 | 8.1-sp3.x |
| bea / weblogic_server | 7.0-sp2 | 7.0-sp2.x |
| bea / weblogic_server | 7.0-sp5 | 7.0-sp5.x |
| bea / weblogic_server | 9.1 | 9.1.x |
| bea / weblogic_server | 8.1-sp2 | 8.1-sp2.x |
| bea / weblogic_server | 7.0-sp1 | 7.0-sp1.x |
| bea / weblogic_server | 8.1-sp1 | 8.1-sp1.x |
| bea / weblogic_server | 8.1-sp4 | 8.1-sp4.x |