Description
Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP GET request with a long major version number, (2) an HTTP GET request to the HTTP proxy on port 3128 with a long major version number, (3) a long OK reply from a POP3 server, and (4) a long SMTP server response.
References
- 5322 vdb-entry
- 20020726 SECURITY.NNOV: multiple vulnerabilities in JanaServer mailing-list
- jana-http-logging-bo(9682) vdb-entry
- 5324 vdb-entry
- jana-smtp-logging-bo(9686) vdb-entry
- jana-pop3-logging-bo(9685) vdb-entry
- jana-http-proxy-bo(9683) vdb-entry
- 5320 vdb-entry
- 5319 vdb-entry