CVE

Id
9906  
CVE No.
CVE-2004-1478  
Status
Candidate  
Description
JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user"s HTTP session.  
Phase
Assigned (20050213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
67716 9906 CVE-2004-1478 BUGTRAQ:20040923 New Macromedia Security Zone Bulletins Posted  View
67717 9906 CVE-2004-1478 URL:http://marc.info/?l=bugtraq&m=109621995623823&w=2  View
67718 9906 CVE-2004-1478 CONFIRM:http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html  View
67719 9906 CVE-2004-1478 CERT-VN:VU#584958  View
67720 9906 CVE-2004-1478 URL:http://www.kb.cert.org/vuls/id/584958  View
67721 9906 CVE-2004-1478 BID:11245  View
67722 9906 CVE-2004-1478 URL:http://www.securityfocus.com/bid/11245  View
67723 9906 CVE-2004-1478 SECUNIA:12638  View
67724 9906 CVE-2004-1478 URL:http://secunia.com/advisories/12638/  View
67725 9906 CVE-2004-1478 XF:jrun-jsessionid-hijack(17481)  View

Related JVN