3536 matches found
CVE-2000-0382
The CVE-2000-0382 entry concerns ColdFusion ClusterCATS, where the application appends stale query string arguments to a URL during HTML redirection, potentially exposing sensitive information to the redirected site. This is reflected in the NVD/CVE descriptions (Low severity, CVSS v2: AV:N/AC:H/...
CVE-2000-0410
CVE-2000-0410 affects ColdFusion Server 4.5.1. The vulnerability arises when remote attackers repeatedly request a CFCACHE tagged cache file that is not stored in memory, causing a denial of service. Documents provide the affected product and the failure mode but do not include exploit details, a...
CVE-2000-0382: Undefined Security Weakness
ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site...
CVE-2000-0410: Undefined Security Weakness
ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory...
coldfusion.dos.txt
Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Allaire's ColdFusion ---------------------------------------------------------------------------- --------- FS Advisory ID: FS-060700-1-CFM Release Date: June 7, 2000 Product: ColdFusion Web Application Serv...
CVE-2000-0538
ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password...
ColdFusion Server 2.03.x4.x - Administrator Login Password Denial of Service
ColdFusion Server 2.03.x4.x - Administrator Login Password Denial of Service source: https://www.securityfocus.com/bid/1314/info Due to a faulty mechanism in the password parsing implementation in authentication requests, it is possible to launch a denial of service attack against Allaire...
Переполнение буфера в ColdFusion
Переполнение буфера при длинном порядка 40000 символов пароле администрирования...
New Allaire ColdFusion DoS
Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Allaire's ColdFusion ---------------------------------------------------------------------------- --------- FS Advisory ID: FS-060700-1-CFM Release Date: June 7, 2000 Product: ColdFusion Web Application Serv...
ColdFusion Server 2.0/3.x/4.x - Administrator Login Password Denial of Service
source: https://www.securityfocus.com/bid/1314/info Due to a faulty mechanism in the password parsing implementation in authentication requests, it is possible to launch a denial of service attack against Allaire ColdFusion 4.5.1 or previous by inputting a string of over 40 000 characters to the...
DoS против ColdFusion
При превышении максимального числа одновременных обращений к кэшированной странице сервера сервер перестанет отвечать на запросы клиента...
CVE-2000-0410
ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory...
CVE-2000-0382
ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site...
CVE-2000-0189
The CVE-2000-0189 entry concerns ColdFusion Server 4.x where remote attackers can determine the server’s real pathname by requesting application.cfm or onrequestend.cfm. The available sources reproduce this description with no explicit exploit code or confirmed active exploitation details in the ...
CVE-2000-0189
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files...
CVE-2000-0189: Undefined Security Weakness
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files...
CVE-2000-0189
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files...
CVE-1999-0455
CVE-1999-0455 concerns the ColdFusion "Expression Evaluator" sample app, where the exprcalc.cfm page improperly restricts server access. The vulnerability allows remote attackers to read or delete files on the server, via a misconfigured access control in the Expression Evaluator workflow. Docume...
CVE-1999-0477
The CVE-1999-0477 issue affects the ColdFusion Application Server’s Expression Evaluator. A remote attacker can upload files via openfile.cfm due to insufficient access restriction, enabling arbitrary file upload on the server. This is documented across multiple sources (e.g., Red Hat, NVD) with ...