|
|
Allaire ColdFusion Template文件可被覆盖漏洞
发布时间：2001-07-16
更新时间：2001-07-16
严重程度：高
威胁程度：其它
错误类型：设计错误
利用方式：服务器模式
受影响系统Allaire ColdFusion Server 4.5.1 SP2
Allaire ColdFusion Server 4.5.1 SP1
Allaire ColdFusion Server 4.5.1
Allaire ColdFusion Server 4.5
Allaire ColdFusion Server 4.0.1
Allaire ColdFusion Server 4.0
Allaire ColdFusion Server 3.1.2
Allaire ColdFusion Server 3.1.1
Allaire ColdFusion Server 3.1
Allaire ColdFusion Server 3.0.1
Allaire ColdFusion Server 3.0
Allaire ColdFusion Server 2.0 详细描述
Allaire ColdFusion是一个WEB应用服务程序，支持开发，发布和管理WEB内容，其中存在一个安全漏洞，远程攻击者可以通过建立一与template一样文件名的新文件来破坏template 文件数据，建立的文件字节大小是0字节。
测试代码
尚无
解决方案
请先读取以下的FAQ然后安装补丁：
http://www.allaire.com/handlers/index.cfm?id=21579
Allaire ColdFusion Server 4.5.1 SP2:
Allaire patch MPSB01-07 ColdFusion Security Patch (Windows Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Windows.exe
Allaire patch MPSB01-07 ColdFusion Security Patch (Solaris Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Solaris.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (Linux Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (HP-UX Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
Allaire ColdFusion Server 4.5.1 SP1:
Allaire patch MPSB01-07 ColdFusion Security Patch (Windows Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Windows.exe
Allaire patch MPSB01-07 ColdFusion Security Patch (Solaris Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Solaris.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (Linux Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (HP-UX Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
Allaire ColdFusion Server 4.5.1:
Allaire patch MPSB01-07 ColdFusion Security Patch (Windows Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Windows.exe
Allaire patch MPSB01-07 ColdFusion Security Patch (Solaris Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Solaris.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (Linux Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (HP-UX Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
Allaire ColdFusion Server 4.5:
Allaire patch MPSB01-07 ColdFusion Security Patch (Windows Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Windows.exe
Allaire patch MPSB01-07 ColdFusion Security Patch (Solaris Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Solaris.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (Linux Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (HP-UX Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
Allaire ColdFusion Server 4.0.1:
Allaire patch MPSB01-07 ColdFusion Security Patch (Windows Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Windows.exe
Allaire patch MPSB01-07 ColdFusion Security Patch (Solaris Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Solaris.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (Linux Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (HP-UX Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
Allaire ColdFusion Server 4.0:
Allaire patch MPSB01-07 ColdFusion Security Patch (Windows Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Windows.exe
Allaire patch MPSB01-07 ColdFusion Security Patch (Solaris Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Solaris.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (Linux Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (HP-UX Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
Allaire ColdFusion Server 3.1.1:
Allaire patch MPSB01-07 ColdFusion Security Patch (Windows Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Windows.exe
Allaire patch MPSB01-07 ColdFusion Security Patch (Solaris Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Solaris.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (Linux Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107Linux.tar.gz
Allaire patch MPSB01-07 ColdFusion Security Patch (HP-UX Editions)
http://a725.g.akamai.net/7/725/3564/v002/download.macromedia.com/publicdl/update/en/coldfusion/45/CFMPSB0107HPUX.tar.gz
相关信息
|
