CVE-2013-3349

Adobe ColdFusion 9.0–9.0.2 running on the JRun application server is affected by an unspecified remote DoS vulnerability (CVE-2013-3349). The issue, disclosed in APSB13-19, allows an attacker to cause the ColdFusion server to crash via unknown vectors. Remediation is to apply the hotfixes describ...

July 2013 Adobe Security Bulletins, Patches Released

Adobe today released its monthly round of security updates with patches available for Flash Player, Shockwave and ColdFusion. None of the vulnerabilities are being exploited in the wild, according to Adobe. The flaws in Flash Player and Shockwave could allow hackers to remotely install and run...

Macromedia JRun 4 mod_jrun Buffer Overflow (CVE-2004-0646)

Macromedia JRun is an application server used to deploy J2EE Java 2 Enterprise Edition applications, JSPs Java Server Pages, and other Java applications. It can be used as a stand-alone web server or can be accessed through other web servers including Apache. Apache can communicate with the JRun...

Adobe JRun 4 Server File Disclosure (CVE-2004-0928)

Adobe JRun is an application server used to deploy J2EE Java 2 Enterprise Edition applications, JSPs Java Server Pages, and other Java applications. It can be used as a stand-alone web server or can be accessed through other web servers including IIS and Apache. With IIS, JRun can be registered t...

Update Protection against Adobe JRun 4 Management Console Cross-Site Scripting Vulnerability (APSB09-12)

A Cross Site Scripting XSS vulnerability has been discovered in Adobe JRun Management Console. JRun is an application server based on Java 2 Platform, Enterprise Edition J2EE. It works with popular Web servers including Apache and IIS. A remote attacker could exploit this issue to execute a...

Adobe JRun Management Console Multiple Vulnerabilities

The host is running Adobe JRun and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobejrunmultvulnwin.nasl 7573 2017-10-26 09:18:50Z cfischer $ Adobe JRun Management Console Multiple Vulnerabilities Windows Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Adobe JRun 4.0 Management Console Multiple Vulnerabilities (APSB09-12)

Adobe JRun is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe JRun Detection (HTTP)

HTTP based detection of Adobe JRun formerly maintained by Allaire and Macromedia. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe JRun 4 (logfile) Directory Traversal Vulnerability (auth)

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-052 Application: Adobe JRun Application Server Versions Affected: 4 updater 7 Vendor URL: http://www.adobe.com/products/jrun/ Bug: Directory Traversal File Read Exploits: YES Reported: 20.01.2009 Vendor...

Directory traversal

Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4 Updater 7 allows remote authenticated users to read arbitrary files via a .. dot dot in the logfile parameter...

CVE-2009-1874

Multiple cross-site scripting XSS vulnerabilities in the Management Console in Adobe JRun 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1873

Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4 Updater 7 allows remote authenticated users to read arbitrary files via a .. dot dot in the logfile parameter...

CVE-2009-1874

Multiple cross-site scripting XSS vulnerabilities in the Management Console in Adobe JRun 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1873

Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4 Updater 7 allows remote authenticated users to read arbitrary files via a .. dot dot in the logfile parameter...

CVE-2009-1874

CVE-2009-1874 : Adobe JRun 4.0 Management Console is affected by multiple XSS vulnerabilities. The references indicate that remote attackers can inject arbitrary web script or HTML via unspecified vectors in the Management Console. The NVD entry lists a base score of 4.3 (Medium) with Network att...

CVE-2009-1873

Adobe JRun 4.x Management Console is affected by CVE-2009-1873: a directory traversal in logviewer.jsp that, when exploited by an authenticated remote attacker via the logfile parameter, allows reading arbitrary files on the server. Affected product is Adobe JRun Application Server 4 Updater 7. C...

Adobe Patches 'Critical' ColdFusion, JRun Flaws

Adobe’s never-ending run on the security treadmill hit a new gear this week with the release of patches to cover serious vulnerabilities in the ColdFusion and JRun web design and development platforms. The patches, rated critical, cover a total of 7 vulnerabilities, some of which “could lead to t...

Adobe JRun 4 (logfile) Directory Traversal Vulnerability (auth)

Exploit for windows platform in category remote exploits =============================================================== Adobe JRun 4 logfile Directory Traversal Vulnerability auth =============================================================== Directory Traversal vulnerability found in script...

Adobe JRun 4 - logfile (Authenticated) Directory Traversal

Adobe JRun 4 - logfile Authenticated Directory Traversal Digital Security Research Group DSecRG Advisory DSECRG-09-052 Application: Adobe JRun Application Server Versions Affected: 4 updater 7 Vendor URL: http://www.adobe.com/products/jrun/ Bug: Directory Traversal File Read Exploits: YES Reporte...

Preemptive Protection against Adobe JRun 4.0 Directory Traversal File Read Vulnerability (APSB09-12)

A directory traversal vulnerability was reported in the Adobe Systems JRun. JRun is an application server based on Java 2 Platform, Enterprise Edition J2EE. It works with popular Web servers including Apache and IIS. This vulnerability allows an attacker to access normally-inaccessible files and...