Allaire ColdFusion Path Disclosure Vulnerability

Bugtraq ID:	1021
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	Yes
Published:	Mar 01 2000 12:00AM
Updated:	Mar 01 2000 12:00AM
Credit:	Posted to NTBugtraq by vwaaijen <[email protected]> on March 1, 2000.
Vulnerable:	Allaire ColdFusion Server 4.5 - Cobalt Linux 5.0 - Cobalt Linux 5.0 - HP HP-UX 11.0 - HP HP-UX 11.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Redhat Linux 7.0 - Redhat Linux 7.0 - Sun Solaris 8_sparc - Sun Solaris 8_sparc - SuSE Linux 7.0 - SuSE Linux 7.0 Allaire ColdFusion Server 4.0.1 Allaire ColdFusion Server 4.0
Not Vulnerable:	Allaire ColdFusion Server 4.5.1

Allaire ColdFusion Path Disclosure Vulnerability

Making an http request directly to an existing APPLICATION.CFM or ONREQUESTEND.CFM file will return an error message containing the full physical path to the file.

Allaire ColdFusion Path Disclosure Vulnerability

http://target/application.cfm

Allaire ColdFusion Path Disclosure Vulnerability

Solution:
Allaire is aware of the issue and it is fixed as of the 4.5.1 release.

Upgrades are available from:
http://www.allaire.com/developer/securityzone/

Allaire ColdFusion Path Disclosure Vulnerability

References: