CVE-2002-0801 Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a ....
HighCVSS 10.0
EPSS 9.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia jrun | = 3.0 | No fix listed |
| macromedia jrun | = 3.1 | No fix listed |
References
- 20020529 [VulnWatch] FW: Macromedia JRUN Buffer overflow vulnerability (#NISR29052002) mailing-list
- 20020529 Macromedia JRUN Buffer overflow vulnerability (#NISR29052002) mailing-list
- 20020529 Addendum to advisory #NISR29052002 (JRun buffer overflow) mailing-list
- CA-2002-14 third-party-advisory us-government-resource
- jrun-isapi-host-bo(9194) patch vdb-entry vendor-advisory
- VU#703835 patch third-party-advisory us-government-resource
- 5082 vdb-entry
- 4873 patch vdb-entry vendor-advisory