CVE:CVE-2007-2697
CNNVD:CNNVD-200705-312
当处于特定配置的情况下，BEA WebLogic Express and WebLogic Server 中内嵌的LDAP服务器,没有限制或审计失败的验证尝试，这使得远程攻击者可以更易于对管理员密码执行暴力破解攻击或者借助登陆尝试淹没服务器并引起拒绝服务攻击。
solution:Upgrade bea weblogic_server to a higher version than 7.0,7.0:sp1,7.0:sp2,7.0:sp3,7.0:sp4,7.0:sp5,7.0:sp6,7.0:sp7,8.1,8.1:sp1,8.1:sp2,8.1:sp3,8.1:sp4,8.1:sp5,9.0,9.0:ga,9.1,9.1:ga,and avoid the version 7.0,7.0:sp1,7.0:sp2,7.0:sp3,7.0:sp4,7.0:sp5,7.0:sp6,7.0:sp7,8.1,8.1:sp1,8.1:sp2,8.1:sp3,8.1:sp4,8.1:sp5,9.0,9.0:ga,9.1,9.1:ga