CVE-2002-1309 | BDVDB-2026-4796 Detail

Description#

Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to execute arbitrary via an HTTP GET request with a long .cfm file name.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&r=1&b=200211&w=2
http://www.eeye.com/html/Research/Advisories/AD20021112.html
http://archives.neohapsis.com/archives/bugtraq/2002-11/0149.html
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0080.html

Exploit#

No public exploit known

History#

Version 12002-11-21Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.