Lucene search
+L

86 matches found

securityvulns
securityvulns
•added 2002/05/31 12:00 a.m.•40 views

Advisory CA-2002-14 Buffer overflow in Macromedia JRun

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-14 Buffer overflow in Macromedia JRun Original release date: May 29, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Windows NT4 or Windows 2000 running IIS versions 4...

1.2AI score
SaveExploits0
securityvulns
securityvulns
•added 2002/05/29 12:00 a.m.•40 views

Macromedia JRUN Buffer overflow vulnerability (#NISR29052002)

NGSSoftware Insight Security Research Advisory Name: Macromedia JRun 3.1 Systems Affected: IIS 4/5 on WinNT 4/Win2K Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.macromedia.com Author: David Litchfield [email protected] Advisory URL:...

0.6AI score
SaveExploits0
CERT
CERT
•added 2002/05/29 12:00 a.m.•35 views

Macromedia JRun ISAPI DLL filter vulnerable to buffer overflow via request for long Host header field

Overview A remotely exploitable buffer overflow exists in Macromedia's JRun version 3.1 on Win32 platforms. Description A remotely exploitable buffer overflow exists in the Win32 version of Macromedia's JRun version 3.1 on Win32 platforms.JRun is an application server that works with most popular...

10CVSS7.5AI score0.09133EPSS
SaveExploits0References5
NVD
NVD
•added 2001/12/31 5:00 a.m.•27 views

CVE-2001-1513

Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' slash, as demonstrated using ctx...

7.5CVSS6.6AI score0.01532EPSS
SaveExploits0References3
NVD
NVD
•added 2001/12/31 5:00 a.m.•26 views

CVE-2001-1545

Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests a.k.a. rewriting when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing...

5CVSS6.7AI score0.01373EPSS
SaveExploits0References3
NVD
NVD
•added 2001/12/31 5:00 a.m.•29 views

CVE-2001-1544

Directory traversal vulnerability in Macromedia JRun Web Server JWS 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP GET request...

5CVSS6.6AI score0.01685EPSS
SaveExploits0References3
Rows per page
Query Builder