Adobe ColdFusion (CVE-2011-0581) CRLF Injection Vulnerability
BID:46281
Info
Adobe ColdFusion (CVE-2011-0581) CRLF Injection Vulnerability
| Bugtraq ID: | 46281 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-0581 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 08 2011 12:00AM |
| Updated: | Mar 08 2011 12:17AM |
| Credit: | Pete Freitag of Foundeo |
| Vulnerable: |
Adobe ColdFusion 8.0.1 Adobe ColdFusion 9.0.1 Adobe ColdFusion 9.0 Adobe ColdFusion 8.0 |
| Not Vulnerable: | |
Discussion
Adobe ColdFusion (CVE-2011-0581) CRLF Injection Vulnerability
Adobe ColdFusion is prone to a CRLF-injection vulnerability.
An attacker can exploit this issue to add arbitrary headers to a webpage. This may aid in further attacks.
Adobe ColdFusion is prone to a CRLF-injection vulnerability.
An attacker can exploit this issue to add arbitrary headers to a webpage. This may aid in further attacks.
Exploit / POC
Adobe ColdFusion (CVE-2011-0581) CRLF Injection Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Adobe ColdFusion (CVE-2011-0581) CRLF Injection Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Adobe ColdFusion 8.0
Adobe ColdFusion 9.0
Adobe ColdFusion 9.0.1
Adobe ColdFusion 8.0.1
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Adobe ColdFusion 8.0
Adobe ColdFusion 9.0
Adobe ColdFusion 9.0.1
-
Adobe CF901.zip
http://kb2.adobe.com/cps/890/cpsid_89094/attachments/CF901.zip
Adobe ColdFusion 8.0.1
-
Adobe CF801.zip
http://kb2.adobe.com/cps/890/cpsid_89094/attachments/CF801.zip
References
Adobe ColdFusion (CVE-2011-0581) CRLF Injection Vulnerability
References:
References: