• info
• discussion
• exploit
• solution
• references

Allaire JRun Unnecessary JSessionID Appending In URL Vulnerability

Solution:
Macromedia has released patches which address this issue.


Macromedia JRun 3.0

• Macromedia JRun Win32 jr30sp2_25232.exe
  http://download.allaire.com/publicdl/en/jrun/30/jr30sp2_25232.exe


• Macromedia JRun Unix jr30sp2u_25232.sh
  http://download.allaire.com/publicdl/en/jrun/30/jr30sp2u_25232.sh

Macromedia JRun 3.1

• Macromedia JRun Win32 jrun-31-win-upgrade-us_26414.exe
  http://download.allaire.com/publicdl/en/jrun/31/jrun-31-win-upgrade-us _26414.exe


• Macromedia JRun Unix jrun-31-unix-upgrade-us_26414.sh
  http://download.allaire.com/publicdl/en/jrun/31/jrun-31-unix-upgrade-u s_26414.sh