Lucene search
MitreCVE-2001-0535HistoryOct 30, 2001 - 5:00 a.m.
CVE-2001-0535
2001-10-3005:00:00
mitre
web.nvd.nist.gov
28
coldfusion server
remote attack
access restriction failure
cve-2001-0535
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.005
Percentile
76.7%
Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host’s domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the “HTTP Host” (CGI.Host) variable in (1) the “Web Publish” example script, and (2) the “Email” example script.
Affected configurations
Node
macromediacoldfusion_serverMatch4.x
| Vendor | Product | Version | CPE |
|---|---|---|---|
| macromedia | coldfusion_server | 4.x | cpe:2.3:a:macromedia:coldfusion_server:4.x:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2001-0535
2001-10-30 05:00:00
cvelist
cvelist
CVE-2001-0535
2001-10-12 04:00:00
securityvulns
securityvulns
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.005
Percentile
76.7%
Related for CVE-2001-0535