PT-2001-1090 · Adobe · Coldfusion Server

Publicado 2001-03-12 · Atualizado 2008-09-05 · CVE-1999-0923

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ColdFusion Server version 4.0

Description The issue allows remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls through sample runnable code snippets.

Recommendations For ColdFusion Server version 4.0, remove or restrict access to the sample runnable code snippets to prevent exploitation.

Correção

Identificadores relacionados

CVE-1999-0923

Produtos afetados

Coldfusion Server

Referências · 2

• http://allaire.com/handlers/index.cfm?ID=8739&Method=Full · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-1999-0923 · Nota de Segurança