CVE-2002-0665

Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash / in the URL...

CVE-2002-1855

Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-2186

Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL...

CVE-2002-2187

Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact...

CVE-2002-1310

The CVE-2002-1310 entry affects the IIS ISAPI handler for Macromedia JRun 4.0 and earlier, where a heap-based buffer overflow in the error-handling path can be triggered by an HTTP GET with a long .jsp filename. This leads to potential remote arbitrary-code execution. The vulnerability is tied to...

CVE-2002-1310

Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name...

Macromedia JRun/ColdFusion buffer overflow

Multiple buffer overlfows during URI parsing...

EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities

Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities Release Date: November 12, 2002 Severity: High Remote SYSTEM level code execution Systems Affected: Macromedia Coldfusion 6.0 and prior IIS ISAPI Macromedia JRun 4.0 and prior IIS ISAPI Description: Macromedia JRun and...

Buffer overflow in JRun

Buffer overflow on partsing Host: header...

Macromedia JRun IIS ISAPI Filter GET Request Buffer Overrun Vulnerability

Description The Macromedia JRun IIS ISAPI handler is prone to a remotely exploitable buffer overrun condition. The issue is due to a lack of bounds checking on requested filenames. It is possible to trigger the overrun if a filename of excessive length is requested. This vulnerability has been...

CVE-2002-1025

JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed...

CVE-2002-0937

The Java Server Pages JSP engine in JRun allows web page owners to cause a denial of service engine crash on the web server via a JSP page that calls WPrinterJob.pageSetupnull,null...

CVE-2002-0937

The Java Server Pages JSP engine in JRun allows web page owners to cause a denial of service engine crash on the web server via a JSP page that calls WPrinterJob.pageSetupnull,null...

CVE-2002-0937

The CVE-2002-0937 entry concerns the JSP engine in JRun. Affected component: Java Server Pages (JSP) engine used by JRun. Root cause: a JSP page that calls WPrinterJob().pageSetup(null,null) can trigger an engine crash, leading to a denial of service on the web server. Impact: server instability/...

CVE-2002-0801

Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file...

CVE-2002-0665

Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash / in the URL...

KPMG-2002026: Jrun sourcecode Disclosure

-------------------------------------------------------------------- Title: Jrun sourcecode Disclosure BUG-ID: 2002026 Released: 01st Jul 2002 -------------------------------------------------------------------- Problem: ======== It is possible for a malicious user to trick the Jrun webserver int...

Source code leakage in JRun

Adding some sequences to request it's possible to obtain JSP source code...

Macromedia JRun 34 - Administrative Authentication Bypass

Macromedia JRun 34 - Administrative Authentication Bypass source: https://www.securityfocus.com/bid/5118/info Macromedia JRun is prone to an issue which may allow remote attackers to bypass the authentication page for the admin server. This may be exploited by adding an extraneous '/' to a reques...

CVE-2001-1084

Affected software: Allaire JRun 3.0 and 2.3.3. Vulnerability: cross-site scripting via error messages when a request targets non-existent files (.JSP, .shtml, .jsp10, .jrun, .thtml). Root cause: uploaded/embedded Javascript from attacker is echoed into an error page, enabling script execution. Im...