CVE:CVE-2006-0419
CNNVD:CNNVD-200601-335
BEA WebLogic Server和WebLogic Express 存在拒绝服务楼顶那个，允许与嵌入式LDAP服务器进行匿名绑定，远程攻击者可以读取用户条目，或通过大量连接使系统拒绝服务(未指定)。
solution:Upgrade bea weblogic_server to a higher version than 7.0:sp1,7.0:sp2,7.0:sp3,7.0:sp4,7.0:sp5,7.0:sp6,8.1:sp1,8.1:sp2,8.1:sp3,8.1:sp4,8.1:sp5,9.0,and avoid the version 7.0:sp1,7.0:sp2,7.0:sp3,7.0:sp4,7.0:sp5,7.0:sp6,8.1:sp1,8.1:sp2,8.1:sp3,8.1:sp4,8.1:sp5,9.0