• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Allaire JRun Unnecessary JSessionID Appending In URL Vulnerability

Bugtraq ID:	3665
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 06 2001 12:00AM
Updated:	Dec 06 2001 12:00AM
Credit:	Published in Macromedia Product Security Bulletin (MPSB01-18) on Dec 6, 2001.
Vulnerable:	Macromedia JRun 3.1 - IBM AIX 4.3 - IBM AIX 4.2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - RedHat Linux 6.1 sparc - RedHat Linux 6.1 i386 - RedHat Linux 6.1 alpha - RedHat Linux 6.0 sparc - RedHat Linux 6.0 alpha - RedHat Linux 6.0 - SGI IRIX 6.5 - Sun Solaris 8 - Sun Solaris 7.0 Macromedia JRun 3.0 - IBM AIX 4.3 - IBM AIX 4.2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - RedHat Linux 6.1 sparc - RedHat Linux 6.1 i386 - RedHat Linux 6.1 alpha - RedHat Linux 6.0 sparc - RedHat Linux 6.0 - SGI IRIX 6.5 - Sun Solaris 7.0 - Sun Solaris 2.6
Not Vulnerable: