PT-2001-2520 · Adobe · Coldfusion Server

Publicado 2001-07-11 · Atualizado 2017-07-11 · CVE-2001-1427

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ColdFusion Server versions 2.0 through 4.5.1 SP2

Description The issue allows remote attackers to overwrite templates with zero byte files. The exact attack vectors are not specified.

Recommendations For ColdFusion Server versions 2.0 through 4.5.1 SP2, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2001-1427

Produtos afetados

Coldfusion Server

Referências · 5

• http://kb.cert.org/vuls/id/321475 · Correção
• http://securityfocus.com/bid/3023 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6840 · Nota
• http://macromedia.com/devnet/security/security_zone/mpsb01-07.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2001-1427 · Nota de Segurança