Macromedia JRun IIS ISAPI Filter GET Request Buffer Overrun Vulnerability

Bugtraq ID:	6122
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 07 2002 12:00AM
Updated:	Nov 07 2002 12:00AM
Credit:	Discovered by Riley Hassell of eEye Digital Security.
Vulnerable:	Macromedia JRun 4.0 - Microsoft IIS 5.1 - Microsoft IIS 5.0 - Microsoft IIS 4.0 Macromedia JRun 3.1 - IBM AIX 4.3 - IBM AIX 4.2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Redhat Linux 6.1 sparc - Redhat Linux 6.1 i386 - Redhat Linux 6.1 alpha - Redhat Linux 6.0 sparc - Redhat Linux 6.0 alpha - Redhat Linux 6.0 - SGI IRIX 6.5 - Sun Solaris 8_sparc - Sun Solaris 7.0 Macromedia JRun 3.0 - IBM AIX 4.3 - IBM AIX 4.2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Redhat Linux 6.1 sparc - Redhat Linux 6.1 i386 - Redhat Linux 6.1 alpha - Redhat Linux 6.0 sparc - Redhat Linux 6.0 - SGI IRIX 6.5 - Sun Solaris 7.0 - Sun Solaris 2.6 Macromedia ColdFusion Server MX 6.0
Not Vulnerable:	Macromedia JRun 4.0 SP1a Macromedia JRun 4.0 SP1

Macromedia JRun IIS ISAPI Filter GET Request Buffer Overrun Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Macromedia JRun IIS ISAPI Filter GET Request Buffer Overrun Vulnerability

Solution:
Macromedia has released an updater for customers using affected ColdFusion MX releases. Additionally, Macromedia has released patches to address this issue.


Macromedia JRun 3.0

• Macromedia JRun 3.0 Windows Upgrade 53843
  Fixes are available for internationalized versions of JRun.
  http://www.macromedia.com/v1/handlers/index.cfm?ID=23500

Macromedia JRun 3.1

• Macromedia JRun 3.1 Windows Upgrade 54009
  Fixes are available for internationalized versions of JRun.
  http://www.macromedia.com/v1/handlers/index.cfm?ID=23500

Macromedia JRun 4.0

• Macromedia JRun 4.0 Windows Upgrade SP1
  Fixes are available for internationalized versions of JRun.
  http://www.macromedia.com/v1/handlers/index.cfm?ID=23500

Macromedia ColdFusion Server MX 6.0

• Macromedia ColdFusion MX Updater Release 1
  http://dynamic.macromedia.com/bin/MM/software/trial/hwswrec.jsp?produc t=cfmx_updater

Macromedia JRun IIS ISAPI Filter GET Request Buffer Overrun Vulnerability

References:

• MPSB02-05 - Patch Available for Buffer Overflow attack on ColdFusion MX with MS (Macromedia)
  
• MPSB02-12 - Cumulative Security Patch available for JRun 3.0, 3.1 and 4.0 (Macromedia)
  
• EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities ("Marc Maiffret" )
  
• Update: EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabi ("Marc Maiffret" )