CVE-2002-1025

概要

参考情報

• archives.neohapsis.com/archives/vulnwatch/2002-q2/0138.html
• online.securityfocus.com/archive/1/280062
• iss.net/security_center/static/9459.php · Patch
• macromedia.com/v1/handlers/index.cfm
• osvdb.org/5028
• securityfocus.com/bid/5134 · Exploit

jrun のその他の脆弱性

• CVE-2005-4473中 5.0Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via "a malformed…
• CVE-2005-4472高 7.5Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly exec…
• CVE-2005-2306低 3.7Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication to…
• CVE-2004-2182高 7.5Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID inf…
• CVE-2004-1478高 7.5JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack…