PT-2000-1352 · Adobe · Coldfusion Server

Published 2000-05-10 · Updated 2008-09-10 · CVE-2000-0410

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ColdFusion Server version 4.5.1

Description The issue allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory.

Recommendations For ColdFusion Server version 4.5.1, consider implementing measures to limit repeated requests to CFCACHE tagged cache files, such as restricting access or implementing rate limiting, until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2000-0410

Affected Products

Coldfusion Server

References · 3

• 🔥 http://ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0005&L=ntbugtraq&F=&S=&P=4843 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0410 · Security Note
• http://securityfocus.com/bid/1192 · Note