漏洞信息详情
Allaire ColdFusion模板覆盖漏洞
- CNNVD编号:CNNVD-200107-071
- 危害等级: 高危
- CVE编号: CVE-2001-1427
- 漏洞类型: 未知
- 发布时间: 2001-07-11
- 威胁类型: 远程
- 更新时间: 2005-10-20
- 厂 商: macromedia
- 漏洞来源: This vulnerability...
漏洞简介
ColdFusion Server 2.0到4.5.1 SP2版本存在未知漏洞。远程攻击者可以借助未知攻击向量覆盖具有零字节文件的模板。
漏洞公告
The vendor has released patches which address this issue. Please read the FAQ for instructions on how to install the patches: http://www.allaire.com/handlers/index.cfm?id=21579 Allaire ColdFusion Server 3.1.1
- Allaire MPSB01-07 ColdFusion Security Patch (HP-UX Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Linux Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Solaris Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Solaris.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Windows Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Windows.exe
- Allaire MPSB01-07 ColdFusion Security Patch (HP-UX Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Linux Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Solaris Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Solaris.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Windows Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Windows.exe
- Allaire MPSB01-07 ColdFusion Security Patch (HP-UX Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Linux Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Solaris Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Solaris.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Windows Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Windows.exe
- Allaire MPSB01-07 ColdFusion Security Patch (HP-UX Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Linux Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Solaris Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Solaris.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Windows Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Windows.exe
- Allaire MPSB01-07 ColdFusion Security Patch (HP-UX Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Linux Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Solaris Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Solaris.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Windows Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Windows.exe
- Allaire MPSB01-07 ColdFusion Security Patch (HP-UX Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
- Allaire MPSB01-07 ColdFusion Security Patch (Linux Editions) http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publi cdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
参考网址
来源:US-CERT Vulnerability Note: VU#321475 名称: VU#321475 链接:http://www.kb.cert.org/vuls/id/321475 来源: BID 名称: 3023 链接:http://www.securityfocus.com/bid/3023 来源: www.macromedia.com 链接:http://www.macromedia.com/devnet/security/security_zone/mpsb01-07.HTML 来源: XF 名称: coldfusion-overwrite-template(6840) 链接:http://xforce.iss.net/xforce/xfdb/6840
受影响实体
- Macromedia Coldfusion:3.1.2
- Macromedia Coldfusion:4.5.1:Sp2
- Macromedia Coldfusion:3.1
- Macromedia Coldfusion:3.0.1
- Macromedia Coldfusion:2.0
补丁
暂无
![weinxin](http://zone.ci/zone_ci_images/zone.ci.png)
特别声明
本站(ZONE.CI)所有文章仅供技术研究,若将其信息做其他用途,由用户承担全部法律及连带责任,本站不承担任何法律及连带责任,请遵守中华人民共和国安全法.
评论