CVE

Id
48649  
CVE No.
CVE-2011-0737  
Status
Candidate  
Description
** DISPUTED ** Adobe ColdFusion 9.0.1 CHF1 and earlier allows remote attackers to obtain sensitive information via an id=- query to a .cfm file, which reveals the installation path in an error message. NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debug Output Settings sections of the ColdFusion Lockdown guide explain the requirement for settings that prevent this information disclosure.  
Phase
Assigned (20110201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528970 48649 CVE-2011-0737 FULLDISC:20110128 Vulnerabilities in Adobe ColdFusion  View
528971 48649 CVE-2011-0737 URL:http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html  View
528972 48649 CVE-2011-0737 MISC:http://websecurity.com.ua/4879/  View
528973 48649 CVE-2011-0737 OSVDB:70781  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33992 JVNDB-2011-004234 Novell ZENworks Handheld Management の ZfHIPCND.exe におけるバッファオーバーフローの脆弱性 Novell ZENworks Handheld Management の ZfHIPCND.exe には、バッファオーバーフローの脆弱性が存在します。 CVE-2011-0742 48649 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004234.html  View