Lucene search

[email protected]CVE-2004-1815

HistoryMar 15, 2004 - 5:00 a.m.

CVE-2004-1815

2004-03-1505:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-1815

vulnerability

coldfusion

jrun

denial of service

nvd

soap

web service

remote attackers

6.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.281 Low

EPSS

Percentile

96.8%

JSON

Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).

CPENameOperatorVersion
sun:one_application_serversun one application servereq7.0
macromedia:jrunmacromedia jruneq4.0
macromedia:coldfusionmacromedia coldfusioneq6.1
macromedia:coldfusionmacromedia coldfusioneq6.0
macromedia:jrunmacromedia jruneq4.0_build_61650

CPE	Name	Operator	Version
sun:one_application_server	sun one application server	eq	7.0
macromedia:jrun	macromedia jrun	eq	4.0
macromedia:coldfusion	macromedia coldfusion	eq	6.1
macromedia:coldfusion	macromedia coldfusion	eq	6.0
macromedia:jrun	macromedia jrun	eq	4.0_build_61650

References

marc.info/?l=bugtraq&m=107936690702515&w=2

secunia.com/advisories/11132

www.macromedia.com/devnet/security/security_zone/mpsb04-04.html

www.securityfocus.com/bid/9877

exchange.xforce.ibmcloud.com/vulnerabilities/15473

6.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.281 Low

EPSS

Percentile

96.8%

JSON

Related for CVE-2004-1815

checkpoint_advisories1 cvelist1