CVE-2004-0646: Buffer Overflow
Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) modjrun and (2) modjrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0646?
CVE-2004-0646 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2004-0646?
To fix CVE-2004-0646, you should upgrade to a patched version of JRun or ColdFusion that addresses this buffer overflow issue.
Which software versions are affected by CVE-2004-0646?
CVE-2004-0646 affects Macromedia JRun versions 3.0 through 4.0 and ColdFusion versions 6.0 and 6.1.
What can attackers do through CVE-2004-0646?
Attackers can exploit CVE-2004-0646 to execute arbitrary code on the affected server by sending a specially crafted HTTP header.
Is CVE-2004-0646 related to Apache web server?
Yes, CVE-2004-0646 is related to the JRun web server connectors for Apache that have the verbose logging feature enabled.