CVE-2002-0665

Macromedia JRun - Unauthenticated Authentication Bypass via Extra Slash in URL

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-0665. PoCs published by Matt Moore.

AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in Macromedia JRun by appending an extra '/' to the URL, allowing unauthorized access to administrative functions such as shutting down the server.

Description

Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Matt Moore · textremotewindows

https://www.exploit-db.com/exploits/21582

View Code ZIP pw:eip

This exploit demonstrates an authentication bypass vulnerability in Macromedia JRun by appending an extra '/' to the URL, allowing unauthorized access to administrative functions such as shutting down the server.

Classification

Working Poc 90%

Attack Type

Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: Macromedia JRun

No auth needed

Prerequisites: Network access to the JRun server

MITRE ATT&CK