PT-2000-1352 · Adobe · Coldfusion Server

Publicado 2000-05-10 · Atualizado 2008-09-10 · CVE-2000-0410

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ColdFusion Server version 4.5.1

Description The issue allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory.

Recommendations For ColdFusion Server version 4.5.1, consider implementing measures to limit repeated requests to CFCACHE tagged cache files, such as restricting access or implementing rate limiting, until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2000-0410

Produtos afetados

Coldfusion Server

Referências · 3

• 🔥 http://ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0005&L=ntbugtraq&F=&S=&P=4843 · Exploit
• http://securityfocus.com/bid/1192 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0410 · Nota de Segurança