Macromedia ColdFusion MX Form Fields Denial of Service Vulnerability

Bugtraq ID:	9522
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jan 28 2004 12:00AM
Updated:	Jan 28 2004 12:00AM
Credit:	The disclosure of this issue has been credited to Michael Leahy <[email protected]>.
Vulnerable:	Macromedia ColdFusion MX J2EE 6.1 Macromedia ColdFusion MX 6.1
Not Vulnerable:

Macromedia ColdFusion MX Form Fields Denial of Service Vulnerability

It has been reported that Macromedia ColdFusion MX may be prone to a denial of service vulnerability that may allow a remote attacker to cause the service to crash by issuing a malicious HTTP request containing a large number of HTML variables such as form fields.

Macromedia ColdFusion MX 6.1 has been reported to be vulnerable to this issue.

Macromedia ColdFusion MX Form Fields Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Macromedia ColdFusion MX Form Fields Denial of Service Vulnerability

Solution:
Macromedia has released a patch mpsb04-02.zip to address this issue:


Macromedia ColdFusion MX 6.1

• Macromedia mpsb04-02.zip
  http://download.macromedia.com/pub/security/mpsb04-02.zip

Macromedia ColdFusion MX Form Fields Denial of Service Vulnerability

References:

• Form fields Denial of service (Macromedia)