CVE-2006-2461 Information

Description

BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances which prevents some transmissions from being encrypted via SSL and allows remote attackers to more easily read potentially sensitive network traffic.

Reference

http://dev2dev.bea.com/pub/advisory/194 http://secunia.com/advisories/20130 http://securitytracker.com/id?1016102 http://www.vupen.com/english/advisories/2006/1828 https://exchange.xforce.ibmcloud.com/vulnerabilities/26459