CVEvulnerability
CVE-2004-0928
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-10-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".
Affected configurations
• hitachi cosminexus enterprise 01 01 1
• hitachi cosminexus enterprise 01 02 2
• hitachi cosminexus server web 01-01 1
• hitachi cosminexus server web 01-01 2
• macromedia coldfusion 6.0
• macromedia coldfusion 6.1
• macromedia jrun 3.0
• macromedia jrun 3.1
• macromedia jrun 4.0
References
- http://marc.info/?l=bugtraq&m=109621995623823&w=2 marc.info
- http://secunia.com/advisories/12638/ Patch, Vendor Advisory
- http://secunia.com/advisories/12647/ Patch, Vendor Advisory
- http://www.idefense.com/application/poi/display?id=148&type=vulnerabilities Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/977440 Patch, Third Party Advisory, US Government Resource
- http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html Patch, Vendor Advisory
- http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11245 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17484 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=109621995623823&w=2 marc.info
- http://secunia.com/advisories/12638/ Patch, Vendor Advisory
- http://secunia.com/advisories/12647/ Patch, Vendor Advisory
- http://www.idefense.com/application/poi/display?id=148&type=vulnerabilities Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/977440 Patch, Third Party Advisory, US Government Resource
- http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html Patch, Vendor Advisory
- http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11245 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17484 exchange.xforce.ibmcloud.com