PT-2001-2520 · Adobe · Coldfusion Server

Published 2001-07-11 · Updated 2017-07-11 · CVE-2001-1427

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ColdFusion Server versions 2.0 through 4.5.1 SP2

Description The issue allows remote attackers to overwrite templates with zero byte files. The exact attack vectors are not specified.

Recommendations For ColdFusion Server versions 2.0 through 4.5.1 SP2, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2001-1427

Affected Products

Coldfusion Server

References · 5

• http://kb.cert.org/vuls/id/321475 · Patch
• http://securityfocus.com/bid/3023 · Patch
• http://macromedia.com/devnet/security/security_zone/mpsb01-07.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2001-1427 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6840 · Note