ID de Prueba:	1.3.6.1.4.1.25623.1.0.10581
Categoría:	Web application abuses
Título:	Cold Fusion Administration Page Overflow
Resumen:	A denial of service vulnerability exists within the Allaire; ColdFusion web application server (version 4.5.1 and earlier) which allows an; attacker to overwhelm the web server and deny legitimate web page requests.
Descripción:	Summary: A denial of service vulnerability exists within the Allaire ColdFusion web application server (version 4.5.1 and earlier) which allows an attacker to overwhelm the web server and deny legitimate web page requests. Vulnerability Impact: By downloading and altering the login HTML form an attacker can send overly large passwords (> 40.0000 chars) to the server, causing it to stop responding. Solution: Use HTTP basic authentication to restrict access to this page or remove it entirely if remote administration is not a requirement. A patch should be available from the vendor. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2000-0538 Allaire Security Bulletin: ASB00-14 http://www.allaire.com/handlers/index.cfm?ID=16122&Method=Full BugTraq ID: 1314 http://www.securityfocus.com/bid/1314 Bugtraq: 20000607 New Allaire ColdFusion DoS (Google Search) http://marc.info/?l=bugtraq&m=96045469627806&w=2 http://www.osvdb.org/3399 XForce ISS Database: coldfusion-parse-dos(4611) https://exchange.xforce.ibmcloud.com/vulnerabilities/4611
Copyright	Copyright (C) 2000 Matt Moore

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.