|
|
Macromedia JRun超长URI远程缓冲区溢出漏洞
发布时间：2002-11-07
更新时间：2002-11-13
严重程度：中
威胁程度：权限提升
错误类型：边界检查错误
利用方式：服务器模式
BUGTRAQ ID：6122
受影响系统Macromedia JRun 3.0
- IBM AIX 4.2
- IBM AIX 4.3
- Microsoft Windows 2000 Workstation
- Microsoft Windows 2000 Workstation SP1
- Microsoft Windows 2000 Workstation SP2
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6a
- RedHat Linux 6.0
- RedHat Linux 6.0 sparc
- RedHat Linux 6.1 alpha
- RedHat Linux 6.1 i386
- RedHat Linux 6.1 sparc
- SGI IRIX 6.5
- Sun Solaris 2.6
- Sun Solaris 7.0
Macromedia JRun 3.1
- IBM AIX 4.2
- IBM AIX 4.3
- Microsoft Windows 2000 Workstation
- Microsoft Windows 2000 Workstation SP1
- Microsoft Windows 2000 Workstation SP2
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6a
- RedHat Linux 6.0
- RedHat Linux 6.0 alpha
- RedHat Linux 6.0 sparc
- RedHat Linux 6.1 alpha
- RedHat Linux 6.1 i386
- RedHat Linux 6.1 sparc
- SGI IRIX 6.5
- Sun Solaris 7.0
- Sun Solaris 8.0
Macromedia JRun 4.0
- Microsoft IIS 4.0
- Microsoft IIS 5.0
- Microsoft IIS 5.1 详细描述
Macromedia JRun WEB服务器对进入的WEB请求URI长度检查不正确，远程攻击者可以利用这个漏洞进行缓冲区溢出漏洞，可能以WEB进程权限在系统上执行任意指令。
由于JRun WEB服务程序对URI缺少正确的缓冲区边界检查，远程攻击者可以提交超长URI可导致WEB服务程序发生缓冲区溢出，精心构建URI数据可能以WEB进程权限在系统上执行任意指令。
解决方案
Macromedia JRun 3.0:
Macromedia Upgrade JRun 3.0 Windows Upgrade 53843
http://www.macromedia.com/v1/handlers/index.cfm?ID=23500
Fixes are available for internationalized versions of JRun.Macromedia JRun 3.1:
Macromedia Upgrade JRun 3.1 Windows Upgrade 54009
http://www.macromedia.com/v1/handlers/index.cfm?ID=23500
Fixes are available for internationalized versions of JRun.Macromedia JRun 4.0:
Macromedia Upgrade JRun 4.0 Windows Upgrade SP1
http://www.macromedia.com/v1/handlers/index.cfm?ID=23500
Fixes are available for internationalized versions of JRun.
相关信息
Riley Hassell
参考：http://online.securityfocus.com/archive/1/299545
相关主页：http://www.macromedia.com/v1/handlers/index.cfm?ID=23500
|
