Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ColdFusion DOS设备文件请求导致信息泄露漏洞
Vulnerability Description
Allaire Macromedia ColdFusion是一款WEB应用服务程序，可以运行在Microsoft Windows操作系统下。 ColdFusion服务程序对客户端请求的DOS设备文件处理存在漏洞，可以导致攻击者获得系统敏感信息。 攻击者可以通过请求不存在的.cfm或者.dbm文件，就可以导致ColdFusion服务程序返回包含Web ROOT路径的错误信息。攻击者可以根据此信息对服务做进一步的攻击。
CVSS Information
N/A
Vulnerability Type
N/A