ColdFusion Denial of Service vulnerability in sample script

Subject: ColdFusion Denial of Service vulnerability in sample script Software: ColdFusion Server Professional 4.5.1 Eval for Windows SP2 Risk Level: Medium Author: Niels Heinen Vendor Status: The vendor has released a document concerning this problem Exploitable: Remotely Impact of the...

DoS против ColdFusion

Пользователь может вызвать предельную загрузку сервера путем обращения к определенным скриптам...

CVE-2000-0538

ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password...

CVE-2000-0538

CVE-2000-0538 affects ColdFusion Administrator for ColdFusion 4.5.1 and earlier. A remote attacker can cause a denial-of-service by submitting an abnormally long login password, with OpenVAS notes describing passwords over 40,0000 characters that overwhelm the server. No explicit fixes or patches...

CVE-2000-0382

The CVE-2000-0382 entry concerns ColdFusion ClusterCATS, where the application appends stale query string arguments to a URL during HTML redirection, potentially exposing sensitive information to the redirected site. This is reflected in the NVD/CVE descriptions (Low severity, CVSS v2: AV:N/AC:H/...

CVE-2000-0410

ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory...

CVE-2000-0382

ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site...

CVE-2000-0410

CVE-2000-0410 affects ColdFusion Server 4.5.1. The vulnerability arises when remote attackers repeatedly request a CFCACHE tagged cache file that is not stored in memory, causing a denial of service. Documents provide the affected product and the failure mode but do not include exploit details, a...

coldfusion.dos.txt

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Allaire's ColdFusion ---------------------------------------------------------------------------- --------- FS Advisory ID: FS-060700-1-CFM Release Date: June 7, 2000 Product: ColdFusion Web Application Serv...

CVE-2000-0538

ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password...

ColdFusion Server 2.03.x4.x - Administrator Login Password Denial of Service

ColdFusion Server 2.03.x4.x - Administrator Login Password Denial of Service source: https://www.securityfocus.com/bid/1314/info Due to a faulty mechanism in the password parsing implementation in authentication requests, it is possible to launch a denial of service attack against Allaire...

ColdFusion Server 2.0/3.x/4.x - Administrator Login Password Denial of Service

source: https://www.securityfocus.com/bid/1314/info Due to a faulty mechanism in the password parsing implementation in authentication requests, it is possible to launch a denial of service attack against Allaire ColdFusion 4.5.1 or previous by inputting a string of over 40 000 characters to the...

Переполнение буфера в ColdFusion

Переполнение буфера при длинном порядка 40000 символов пароле администрирования...

New Allaire ColdFusion DoS

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Allaire's ColdFusion ---------------------------------------------------------------------------- --------- FS Advisory ID: FS-060700-1-CFM Release Date: June 7, 2000 Product: ColdFusion Web Application Serv...

DoS против ColdFusion

При превышении максимального числа одновременных обращений к кэшированной странице сервера сервер перестанет отвечать на запросы клиента...

CVE-2000-0410

ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory...

CVE-2000-0382

ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site...

CVE-2000-0189

ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files...

CVE-2000-0189

The CVE-2000-0189 entry concerns ColdFusion Server 4.x where remote attackers can determine the server’s real pathname by requesting application.cfm or onrequestend.cfm. The available sources reproduce this description with no explicit exploit code or confirmed active exploitation details in the ...

CVE-2000-0189

ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files...