CVE-2004-1477

概要

参考情報

• marc.info
• secunia.com/advisories/12638
• kb.cert.org/vuls/id/668206 · Patch
• macromedia.com/devnet/security/security_zone/mpsb04-08.html · Patch
• securityfocus.com/bid/11245 · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/17483

jrun のその他の脆弱性

• CVE-2005-4473中 5.0Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via "a malformed…
• CVE-2005-4472高 7.5Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly exec…
• CVE-2005-2306低 3.7Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication to…
• CVE-2004-2182高 7.5Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID inf…
• CVE-2004-1478高 7.5JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack…