CVE-2002-1030 : Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attacker

Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attackers to cause a denial of service (crash) via a flood of data and connections.

Published 2002-10-04 04:00:00

Updated 2008-09-05 20:29:36

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2002-1030

EPSS FAQ

0.79%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 80 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2002-1030

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
2.6	LOW	AV:N/AC:H/Au:N/C:N/I:N/A:P	4.9	2.9	NIST
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

Products affected by CVE-2002-1030

BEA » Weblogic Server » Version: 5.1
cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:*:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update Sp11 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:sp11:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP2 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:sp2:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP9 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:sp9:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP1 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:sp1:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update Sp10 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:sp10:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP4 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:sp4:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP5 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:sp5:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP6 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:sp6:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP7 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:sp7:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update Sp12 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:sp12:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP3 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:sp3:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP8 Express Edition
cpe:2.3:a:bea:weblogic_server:5.1:sp8:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP1
cpe:2.3:a:bea:weblogic_server:5.1:sp1:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP5
cpe:2.3:a:bea:weblogic_server:5.1:sp5:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP2
cpe:2.3:a:bea:weblogic_server:5.1:sp2:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP6
cpe:2.3:a:bea:weblogic_server:5.1:sp6:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP4
cpe:2.3:a:bea:weblogic_server:5.1:sp4:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP3
cpe:2.3:a:bea:weblogic_server:5.1:sp3:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1
cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP1
cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.0
cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.0 Update SP1
cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP1 Express Edition
cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP2 Express Edition
cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.0 Update SP2
cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.0 Update SP2 Express Edition
cpe:2.3:a:bea:weblogic_server:6.0:sp2:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Express Edition
cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update Sp10
cpe:2.3:a:bea:weblogic_server:5.1:sp10:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update Sp12
cpe:2.3:a:bea:weblogic_server:5.1:sp12:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP8
cpe:2.3:a:bea:weblogic_server:5.1:sp8:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP9
cpe:2.3:a:bea:weblogic_server:5.1:sp9:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP3
cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP3 Express Edition
cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Express Edition
cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 5.1 Update SP7
cpe:2.3:a:bea:weblogic_server:5.1:sp7:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.0 Express Edition
cpe:2.3:a:bea:weblogic_server:6.0:*:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.0 Update SP1 Express Edition
cpe:2.3:a:bea:weblogic_server:6.0:sp1:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP2
cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2002-1030

Exploit prediction scoring system (EPSS) score for CVE-2002-1030

CVSS scores for CVE-2002-1030

References for CVE-2002-1030

Products affected by CVE-2002-1030