Lucene search
HistoryOct 30, 2001 - 5:00 a.m.
CVE-2001-0535
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.005
Percentile
76.7%
Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host’s domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the “HTTP Host” (CGI.Host) variable in (1) the “Web Publish” example script, and (2) the “Email” example script.
Affected configurations
Node
macromediacoldfusion_serverMatch4.x
| Vendor | Product | Version | CPE |
|---|---|---|---|
| macromedia | coldfusion_server | 4.x | cpe:2.3:a:macromedia:coldfusion_server:4.x:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2001-0535
2001-10-12 04:00:00
securityvulns
securityvulns
cve
cve
CVE-2001-0535
2001-10-30 05:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.005
Percentile
76.7%
Related for NVD:CVE-2001-0535