Macromedia JRun Multiple Vulnerabilities
BID:15905
Info
Macromedia JRun Multiple Vulnerabilities
| Bugtraq ID: | 15905 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2005 12:00AM |
| Updated: | Dec 15 2005 12:00AM |
| Credit: | Alex Daley discovered the view source vulnerabilities. iDEFENSE discovered the JRun Web Server denial of service vulnerability. |
| Vulnerable: |
Macromedia JRun 4.0 SP1a Macromedia JRun 4.0 SP1 Macromedia JRun 4.0 build 61650 Macromedia JRun 4.0 |
| Not Vulnerable: | |
Discussion
Macromedia JRun Multiple Vulnerabilities
Macromedia JRun is affected by multiple security vulnerabilities.
The following issues were reported:
- Multiple vulnerabilities that let remote users gain unauthorized access to Web application source code.
- A denial of service vulnerability in the JRun Web Server component.
Macromedia JRun is affected by multiple security vulnerabilities.
The following issues were reported:
- Multiple vulnerabilities that let remote users gain unauthorized access to Web application source code.
- A denial of service vulnerability in the JRun Web Server component.
Exploit / POC
Macromedia JRun Multiple Vulnerabilities
There is no exploit required.
There is no exploit required.
Solution / Fix
Macromedia JRun Multiple Vulnerabilities
Solution:
The vendor has released JRun 4.0 Updater 6 to address this issues. The fix may be obtained from the Macromedia JRun Support Center. Please see the attached vendor advisory for further details.
Solution:
The vendor has released JRun 4.0 Updater 6 to address this issues. The fix may be obtained from the Macromedia JRun Support Center. Please see the attached vendor advisory for further details.
References
Macromedia JRun Multiple Vulnerabilities
References:
References:
- Macromedia JRun Support Center (Macromedia)
- MPSB05-13 Cumulative Security Updater for JRun 4.0 server (Macromedia)