CVE

Id
9356  
CVE No.
CVE-2004-0928  
Status
Candidate  
Description
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".  
Phase
Assigned (20041004)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62273 9356 CVE-2004-0928 IDEFENSE:20041005 ColdFusion MX 6.1 on IIS File Contents Disclosure  View
62274 9356 CVE-2004-0928 URL:http://www.idefense.com/application/poi/display?id=148&type=vulnerabilities  View
62275 9356 CVE-2004-0928 BUGTRAQ:20040923 New Macromedia Security Zone Bulletins Posted  View
62276 9356 CVE-2004-0928 URL:http://marc.info/?l=bugtraq&m=109621995623823&w=2  View
62277 9356 CVE-2004-0928 CONFIRM:http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html  View
62278 9356 CVE-2004-0928 CONFIRM:http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html  View
62279 9356 CVE-2004-0928 CERT-VN:VU#977440  View
62280 9356 CVE-2004-0928 URL:http://www.kb.cert.org/vuls/id/977440  View
62281 9356 CVE-2004-0928 BID:11245  View
62282 9356 CVE-2004-0928 URL:http://www.securityfocus.com/bid/11245  View
62283 9356 CVE-2004-0928 SECUNIA:12638  View
62284 9356 CVE-2004-0928 URL:http://secunia.com/advisories/12638/  View
62285 9356 CVE-2004-0928 SECUNIA:12647  View
62286 9356 CVE-2004-0928 URL:http://secunia.com/advisories/12647/  View
62287 9356 CVE-2004-0928 XF:coldfusion-jrun-restriction-bypass(17484)  View

Related JVN