[Am-info] Significant Macromedia Vulnerability Found

[Fred A. Miller]

Significant Macromedia Vulnerability Found

A buffer-overflow flaw in Macromedia Inc.'s JRun Java 2
Enterprise Edition app server has been found by computer-security
vendor Next Generation Security Software Ltd. The outfit says the
flaw could let hackers gain complete control of a system.
According to the alert, systems with JRun 3.1 installed on
Microsoft's Internet Information Services 4 and 5 on Windows NT 4
and 2000 are vulnerable to this flaw, which can be exploited
remotely.

Macromedia's recently released JRun version 4 shouldn't be
affected by the security glitch, Next Generation says. It's
urging companies to upgrade to that version. More information can
be found at
http://update.informationweek.com/cgi-bin4/flo?y=eHWV0Bce7K0V20BdTd0AE 
.
- George V. Hulme

-- 
Fred A. Miller
Systems Administrator
Cornell Univ. Press Services
fm@cupserv.org, www.cupserv.org
--- SuSE Linux v8.0 Pro, Netscape 7.0---