NVD

Id
71073  
Name
CVE-2004-0646  
Description
Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-12-23  
Modified Date
2017-07-10  
Seq
2004-0646  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
367011 71073 CVE-2004-0646 VU#990200  View
367012 71073 CVE-2004-0646 http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html  View
367013 71073 CVE-2004-0646 http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html  View
367014 71073 CVE-2004-0646 20040929 iDEFENSE Security Advisory 09.29.04 - Macromedia JRun 4 mod_jrun Apache Module Buffer Overflow Vulnerability  View
367015 71073 CVE-2004-0646 11245  View
367016 71073 CVE-2004-0646 coldfusion-jrun-verbose-bo(17485)  View

Related JVN