|
Comments
Did you read today's front page stories & breaking news?
SYS-CON.TV
|
Java Industry News NGSSoftware Reports Vulnerability in JRun 3.1, Corrected in 4.0 Version
NGSSoftware Reports Vulnerability in JRun 3.1, Corrected in 4.0 Version
By: Java News Desk
Jan. 1, 2000 12:00 AM
(June 5, 2002) - A buffer overrun vulnerability in Macromedia's JRun 3.1 server, installed on Microsoft's Internet Information Services 4 and 5 on Windows NT 4 and 2000, could allow an attacker to remotely gain complete control of the server, according to an alert posted by Next Generation Security Software. Previously owned by Allaire, Macromedia JRun is a J2EE server designed to run on Web servers to deliver Java-based online applications. NGSSoftware alerted Macromedia to this problem at the start of April, and since then JRun 4 has been released. This version contains the fix to prevent the overrun. Also, a security patch has been created to address this problem. NGSSoftware advises JRun 3.1 users to upgrade to JRun 4 as soon as possible. For more details, see Macromedia's site, www.macromedia.com/v1/Handlers/index.cfm?ID=22273&Method=Full , or go to www.nextgenss.com/advisories/jrun.txt. At www.nextgenss.com/, vendor notification alerts are also posted for Microsoft SQL Server 2000, Sun iPlanet Web Server 6, and Microsoft HTML Help. Reader Feedback: Page 1 of 1
SOA World Latest Stories
Subscribe to the World's Most Powerful Newsletters
Subscribe to Our Rss Feeds & Get Your SYS-CON News Live!
|
SYS-CON Featured Whitepapers
Most Read This Week |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||