CVE

Id
4967  
CVE No.
CVE-2002-0576  
Status
Entry  
Description
ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
25631 4967 CVE-2002-0576 BUGTRAQ:20020418 KPMG-2002013: Coldfusion Path Disclosure  View
25632 4967 CVE-2002-0576 URL:http://online.securityfocus.com/archive/1/268263  View
25633 4967 CVE-2002-0576 VULNWATCH:20020418 [VulnWatch] KPMG-2002013: Coldfusion Path Disclosure  View
25634 4967 CVE-2002-0576 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0028.html  View
25635 4967 CVE-2002-0576 CONFIRM:http://www.macromedia.com/v1/handlers/index.cfm?ID=22906  View
25636 4967 CVE-2002-0576 BID:4542  View
25637 4967 CVE-2002-0576 URL:http://www.securityfocus.com/bid/4542  View
25638 4967 CVE-2002-0576 XF:coldfusion-dos-device-path-disclosure(8866)  View
25639 4967 CVE-2002-0576 URL:http://www.iss.net/security_center/static/8866.php  View
25640 4967 CVE-2002-0576 OSVDB:3337  View

Related JVN