{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Internet Information Server 4 et 5.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "JRUN 3.1 et 3.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nJRUN est un serveur applicatif utilis\u00e9 dans les serveurs Web les plus\ncourants (Apache, IIS). Un d\u00e9bordement de m\u00e9moire pr\u00e9sent dans un filtre\nISAPI install\u00e9 avec JRUN peut permettre \u00e0 un individu mal intentionn\u00e9\nd\u0027ex\u00e9cuter du code arbitraire \u00e0 distance avec les privil\u00e8ges `SYSTEM`.\n\n## Solution\n\nAppliquer le correctif de Macrom\u00e9dia selon la version affect\u00e9e :\n\n-   windows (version Anglaise) :\n\n    JRUN 3.1 :\n\n        http://download.allaire.com/publicdl/en/jrun/jrun-31-win-upgrade-us_26414.exe\n\n      \n    JRUN 3.0 :\n\n        http://download.allaire.com/publicdl/en/jrun/jr30sp2_25232.exe\n\n      \n\n-   windows (version Japonaise):\n\n    JRUN 3.1 :\n\n        http://download.allaire.com/publicdl/jp/jrun/jrun-31-win-upgrade-ja_30681.exe\n\n      \n    JRUN 3.0 :\n\n        http://download.allaire.com/publicdl/jp/jrun/jr30sp2_29543.exe\n\n      \n\n-   windows (version Fran\u00e7aise) :\n\n    JRUN 3.1 :\n\n        http://download.allaire.com/publicdl/fr/jrun/jrun-31-win-upgrade-fr_30681.exe\n\n      \n    JRUN 3.0 :\n\n        http://download.allaire.com/publicdl/fr/jrun/jr30sp2_29543.exe\n\n      \n\nSe r\u00e9f\u00e9rer \u00e0 l\u0027avis de Macrom\u00e9dia pour plus d\u0027informations (cf.\nDocumentation).\n",
  "cves": [],
  "initial_release_date": "2002-05-30T00:00:00",
  "last_revision_date": "2002-05-30T00:00:00",
  "links": [],
  "reference": "CERTA-2002-AVI-113",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2002-05-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans le serveur d\u0027application JRUN.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans JRUN 3.0 et 3.1",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 #MPSB02-02 de Macrom\u00e9dia",
      "url": "http://www.macromedia.com/security"
    }
  ]
}