Macromedia ColdFusion MX IIS ISAPI过滤器缓冲区溢出漏洞

漏洞信息详情

Macromedia ColdFusion MX IIS ISAPI过滤器缓冲区溢出漏洞

• CNNVD编号：CNNVD-200212-735
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2002-1992
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2002-12-31
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  macromedia
• 漏洞来源：
  Discovered by Rile…

ColdFusion MX中的jrun.dll存在缓冲区溢出漏洞。当和IIS 4或5使用时，远程攻击者可以通过(1)超长模板文件名或(2)超长HTTP头导致IIS中的服务拒绝。

Macromedia has released a patch:
Macromedia ColdFusion Server MX Enterprise

• Macromedia MPSB02-05_Windows.zipPatch for Macromedia ColdFusion MX (all editions) on Microsoft systems with IIS.
  
  http://download.macromedia.com/pub/security/jrun/40/MPSB02-05_Windows.
  zip

Macromedia ColdFusion Server MX Developer

• Macromedia MPSB02-05_Windows.zipPatch for Macromedia ColdFusion MX (all editions) on Microsoft systems with IIS.
  
  http://download.macromedia.com/pub/security/jrun/40/MPSB02-05_Windows.
  zip

Macromedia ColdFusion Server MX Professional

• Macromedia MPSB02-05_Windows.zipPatch for Macromedia ColdFusion MX (all editions) on Microsoft systems with IIS.
  
  http://download.macromedia.com/pub/security/jrun/40/MPSB02-05_Windows.
  zip

来源: BID
名称: 5121
链接:http://www.securityfocus.com/bid/5121

来源: www.macromedia.com
链接:http://www.macromedia.com/v1/handlers/index.cfm?ID=23161

来源: XF
名称: coldfusion-mx-jrundll-bo(9460)
链接:http://www.iss.net/security_center/static/9460.php