HTTP: Coldfusion Administrator Probe
This signature detects access to the ColdFusion administrative page.
Extended Description
Due to a faulty mechanism in the password parsing implementation in authentication requests, it is possible to launch a denial of service attack against Allaire ColdFusion 4.5.1 or previous by inputting a string of over 40 000 characters to the password field in the Administrator login page. CPU utilization could reach up to 100%, bringing the program to halt. The default form for the login page would prevent such an attack. However, a malicious user could download the form locally to their hard drive, modify HTML tag fields, and be able to submit the 40 000 character string to the ColdFusion Server. Restarting the application would be required in order to regain normal functionality.
Affected Products
Allaire coldfusion_server
Short Name
HTTP:COLDFUSION:ADMIN-PROBE
Severity
Warning
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
Administrator CVE-2000-0538 Coldfusion Probe bid:1314
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown
Vendors
Allaire
CVSS Score
5.0