CVE-2000-0410

ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory...

CVE-2000-0382

The CVE-2000-0382 entry concerns ColdFusion ClusterCATS, where the application appends stale query string arguments to a URL during HTML redirection, potentially exposing sensitive information to the redirected site. This is reflected in the NVD/CVE descriptions (Low severity, CVSS v2: AV:N/AC:H/...

CVE-2000-0410

CVE-2000-0410 affects ColdFusion Server 4.5.1. The vulnerability arises when remote attackers repeatedly request a CFCACHE tagged cache file that is not stored in memory, causing a denial of service. Documents provide the affected product and the failure mode but do not include exploit details, a...

coldfusion.dos.txt

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Allaire's ColdFusion ---------------------------------------------------------------------------- --------- FS Advisory ID: FS-060700-1-CFM Release Date: June 7, 2000 Product: ColdFusion Web Application Serv...

CVE-2000-0538

ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password...

ColdFusion Server 2.03.x4.x - Administrator Login Password Denial of Service

ColdFusion Server 2.03.x4.x - Administrator Login Password Denial of Service source: https://www.securityfocus.com/bid/1314/info Due to a faulty mechanism in the password parsing implementation in authentication requests, it is possible to launch a denial of service attack against Allaire...

ColdFusion Server 2.0/3.x/4.x - Administrator Login Password Denial of Service

source: https://www.securityfocus.com/bid/1314/info Due to a faulty mechanism in the password parsing implementation in authentication requests, it is possible to launch a denial of service attack against Allaire ColdFusion 4.5.1 or previous by inputting a string of over 40 000 characters to the...

Переполнение буфера в ColdFusion

Переполнение буфера при длинном порядка 40000 символов пароле администрирования...

New Allaire ColdFusion DoS

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Allaire's ColdFusion ---------------------------------------------------------------------------- --------- FS Advisory ID: FS-060700-1-CFM Release Date: June 7, 2000 Product: ColdFusion Web Application Serv...

DoS против ColdFusion

При превышении максимального числа одновременных обращений к кэшированной странице сервера сервер перестанет отвечать на запросы клиента...

CVE-2000-0410

ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory...

CVE-2000-0382

ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site...

CVE-2000-0189

ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files...

CVE-2000-0189

The CVE-2000-0189 entry concerns ColdFusion Server 4.x where remote attackers can determine the server’s real pathname by requesting application.cfm or onrequestend.cfm. The available sources reproduce this description with no explicit exploit code or confirmed active exploitation details in the ...

CVE-2000-0189

ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files...

CVE-1999-0455

CVE-1999-0455 concerns the ColdFusion "Expression Evaluator" sample app, where the exprcalc.cfm page improperly restricts server access. The vulnerability allows remote attackers to read or delete files on the server, via a misconfigured access control in the Expression Evaluator workflow. Docume...

CVE-1999-0455

The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly...

CVE-1999-0477

The CVE-1999-0477 issue affects the ColdFusion Application Server’s Expression Evaluator. A remote attacker can upload files via openfile.cfm due to insufficient access restriction, enabling arbitrary file upload on the server. This is documented across multiple sources (e.g., Red Hat, NVD) with ...

CVE-1999-0477

The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly...

Allaire ColdFusion Server 4.04.0.1 - CFCACHE Information Disclosure

Allaire ColdFusion Server 4.04.0.1 - CFCACHE Information Disclosure source: https://www.securityfocus.com/bid/917/info ColdFusion 4.x includes a function called CFCACHE. This function improves server performance by caching the HTML output of processed CFM pages. When the CFCACHE tag is used in a...