Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.
archives.neohapsis.com/archives/vulnwatch/2002-q2/0085.html
online.securityfocus.com/archive/1/274528
online.securityfocus.com/archive/1/274601
www.cert.org/advisories/CA-2002-14.html
www.iss.net/security_center/static/9194.php
www.kb.cert.org/vuls/id/703835
www.osvdb.org/5082
www.securityfocus.com/bid/4873