PT-1999-1583 · Adobe · Coldfusion

Published 1999-12-31 · Updated 2008-09-05 · CVE-1999-1124

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ColdFusion (affected versions not specified)

Description The issue allows remote attackers to bypass access restrictions for web pages on other ports. This is achieved by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1124

Affected Products

Coldfusion

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1124 · Security Note
• http://packetstorm.securify.com/mag/phrack/phrack54/P54-08 · Note