CVE

Id
9074  
CVE No.
CVE-2004-0646  
Status
Candidate  
Description
Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.  
Phase
Assigned (20040708)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
59010 9074 CVE-2004-0646 BUGTRAQ:20040929 iDEFENSE Security Advisory 09.29.04 - Macromedia JRun 4 mod_jrun Apache Module Buffer Overflow Vulnerability  View
59011 9074 CVE-2004-0646 URL:http://www.securityfocus.com/archive/1/377194  View
59012 9074 CVE-2004-0646 CONFIRM:http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html  View
59013 9074 CVE-2004-0646 CONFIRM:http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html  View
59014 9074 CVE-2004-0646 CERT-VN:VU#990200  View
59015 9074 CVE-2004-0646 URL:http://www.kb.cert.org/vuls/id/990200  View
59016 9074 CVE-2004-0646 BID:11245  View
59017 9074 CVE-2004-0646 URL:http://www.securityfocus.com/bid/11245  View
59018 9074 CVE-2004-0646 SECUNIA:12647  View
59019 9074 CVE-2004-0646 URL:http://secunia.com/advisories/12647/  View
59020 9074 CVE-2004-0646 XF:coldfusion-jrun-verbose-bo(17485)  View

Related JVN