Vulnerabilities > Macromedia > Jrun
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2002-12-31 | CVE-2002-2187 | Unspecified vulnerability in Macromedia Jrun 3.0/3.1/4.0 Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact. | 5.0 |
| 2002-12-31 | CVE-2002-2186 | Unspecified vulnerability in Macromedia Jrun 3.0/3.1/4.0 Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL. | 5.0 |
| 2002-12-31 | CVE-2002-1855 | Unspecified vulnerability in Macromedia Jrun 3.0/3.1/4.0 Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF."). | 5.0 |
| 2002-11-29 | CVE-2002-1310 | Buffer Overrun vulnerability in Macromedia JRun IIS ISAPI Filter GET Request Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name. | 7.5 |
| 2002-10-04 | CVE-2002-1025 | Unspecified vulnerability in Macromedia Jrun 3.0/3.1/4.0 JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed. | 5.0 |
| 2002-10-04 | CVE-2002-0937 | Denial Of Service vulnerability in Macromedia Jrun 3.0/3.1/4.0 The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null). | 5.0 |
| 2002-08-12 | CVE-2002-0801 | Buffer Overflow vulnerability in Macromedia JRun Host Header Field Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file. | 10.0 |
| 2002-07-11 | CVE-2002-0665 | Authentication Bypass vulnerability in Macromedia Jrun 3.0/3.1/4.0 Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL. | 10.0 |
| 2001-12-31 | CVE-2001-1545 | Unspecified vulnerability in Macromedia Jrun 3.0/3.1 Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. | 5.0 |
| 2001-12-31 | CVE-2001-1544 | Directory Traversal vulnerability in Macromedia Jrun 2.3.3/3.0/3.1 Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. | 5.0 |