CVE

Id
5449  
CVE No.
CVE-2002-1061  
Status
Candidate  
Description
Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP GET request with a long major version number, (2) an HTTP GET request to the HTTP proxy on port 3128 with a long major version number, (3) a long OK reply from a POP3 server, and (4) a long SMTP server response.  
Phase
Proposed (20020830)  
Votes
NOOP(4) Cole, Cox, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
29450 5449 CVE-2002-1061 BUGTRAQ:20020726 SECURITY.NNOV: multiple vulnerabilities in JanaServer  View
29451 5449 CVE-2002-1061 URL:http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html  View
29452 5449 CVE-2002-1061 XF:jana-pop3-logging-bo(9685)  View
29453 5449 CVE-2002-1061 URL:http://www.iss.net/security_center/static/9685.php  View
29454 5449 CVE-2002-1061 XF:jana-smtp-logging-bo(9686)  View
29455 5449 CVE-2002-1061 URL:http://www.iss.net/security_center/static/9686.php  View
29456 5449 CVE-2002-1061 BID:5320  View
29457 5449 CVE-2002-1061 URL:http://www.securityfocus.com/bid/5320  View
29458 5449 CVE-2002-1061 BID:5322  View
29459 5449 CVE-2002-1061 URL:http://www.securityfocus.com/bid/5322  View
29460 5449 CVE-2002-1061 XF:jana-http-proxy-bo(9683)  View
29461 5449 CVE-2002-1061 URL:http://www.iss.net/security_center/static/9683.php  View
29462 5449 CVE-2002-1061 BID:5324  View
29463 5449 CVE-2002-1061 URL:http://www.securityfocus.com/bid/5324  View
29464 5449 CVE-2002-1061 BID:5319  View
29465 5449 CVE-2002-1061 URL:http://www.securityfocus.com/bid/5319  View
29466 5449 CVE-2002-1061 XF:jana-http-logging-bo(9682)  View

Related JVN