3443 matches found
[Full-Disclosure] iDEFENSE Security Advisory 10.05.04a: ColdFusion MX 6.1 on IIS File Contents Disclosure
ColdFusion MX 6.1 on IIS File Contents Disclosure iDEFENSE Security Advisory 10.05.04a: www.idefense.com/application/poi/display?id=148&type=vulnerabilities October 5, 2004 I. BACKGROUND ColdFusion is a programming language based on standard HTML that is used to write dynamic webpages. When a pag...
CVE-2004-0928
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm"...
Macromedia ColdFusion MX 6.1 - Template Handling Privilege Escalation
Macromedia ColdFusion MX 6.1 - Template Handling Privilege Escalation source: https://www.securityfocus.com/bid/11316/info Reportedly Macromedia ColdFusion MX is affected by privilege escalation vulnerability when handling templates. This issue is due to an access validation error that allows a...
Macromedia ColdFusion MX 6.1 - Template Handling Privilege Escalation
source: https://www.securityfocus.com/bid/11316/info Reportedly Macromedia ColdFusion MX is affected by privilege escalation vulnerability when handling templates. This issue is due to an access validation error that allows a user to perform actions with administrator privileges. An attacker may...
CFMX vulnerability
Software: Macromedia ColdFusion MX 6.1 Description: There is a vulnerability in the ColdFusion MX 6.1 product. To exploit this, a user needs access to create a cold fusion template on a ColdFusion server with CreateObject or cfobject tags enabled. The code given below writes a java class to the...
[SA12647] ColdFusion MX Sensitive Information Disclosure and Denial of Service
TITLE: ColdFusion MX Sensitive Information Disclosure and Denial of Service SECUNIA ADVISORY ID: SA12647 VERIFY ADVISORY: http://secunia.com/advisories/12647/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information, DoS WHERE: From remote SOFTWARE: Macromedia ColdFusion MX 6.x...
CVE-2004-0407
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service disk consumption by repeatedly uploading files and interrupting the uploads before they finish...
ColdFusion MX file uploading and error messages memory leak
Memory leak on terminated file upload and oversized error message...
Network Intelligence Advisory - Denial of Service Vulnerability in ColdFusion MX
Name: Denial of Service Vulnerability in ColdFusion MX Systems Affected: Version 6.0 and earlier Severity: Medium-High Category: Denial of Service Vendor URL: Macromedia ColdFusion MX Discovered by: Network Intelligence I Pvt. Ltd. www.nii.co.in Online location: http://www.nii.co.in/vuln/cfdos.ht...
CVE-2004-0407
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service disk consumption by repeatedly uploading files and interrupting the uploads before they finish...
CVE-2004-0407
The CVE concerns ColdFusion MX 6.1: HTML form upload does not reclaim disk space when uploads are interrupted, enabling a remote attacker to perform a denial of service via repeated interrupted uploads. Affected component is the upload handling; root cause is improper disk space reclamation after...
CVE-2004-0407: Undefined Security Weakness
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service disk consumption by repeatedly uploading files and interrupting the uploads before they finish...
MPSB04-06 - Security Patch available for ColdFusion MX 6.1 File Upload Denial of service
IMPORTANT: A security issue that may affect ColdFusion MX 6.1 customers has come to our attention recently. To learn about this new issue and what actions you can take to address it, please visit the Macromedia Security Zone: http://www.macromedia.com/security MPSB04-06 - Security Patch available...
Macromedia ColdFusion MX 6.0 - Oversized Error Message Denial of Service
Macromedia ColdFusion MX 6.0 - Oversized Error Message Denial of Service source: https://www.securityfocus.com/bid/10163/info A denial of service vulnerability has been reported in Macromedia ColdFusion MX that is reported to occur when the software attempts to write oversized error messages. The...
Macromedia ColdFusion MX 6.0 - Oversized Error Message Denial of Service
source: https://www.securityfocus.com/bid/10163/info A denial of service vulnerability has been reported in Macromedia ColdFusion MX that is reported to occur when the software attempts to write oversized error messages. These error messages will be logged by the server but may also be written in...
CVE-2004-1815
Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service memory consumption...
CVE-2003-1469
The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message...
Multiple Vendor SOAP server (XML parser) attribute blowup DoS
/////////////////////////////////////////////////////////////////////////////// //========================== Security Advisory ==========================// ///////////////////////////////////////////////////////////////////////////////...
ColdFusion SQL Error Pages XSS
---------- NOTE ABOUT COLDFUSION XSS ATTACKS Vendor: Macromedia Versions: MX 6.0 tested , older ? PROBLEM: When you access to an error page of sql you can insert xss code to be shown in the error uotput of the sql backend. example: http://target/article.cfm?id=1'scriptalertdocument.cookie;/script...