Description
Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte in a ColdFusion filename, such as a CFM file.
References
- http://www.adobe.com/support/security/bulletins/apsb07-02.html
- 20070121 Adobe ColdFusion Information Disclosure mailing-list
- 23668 third-party-advisory
- 20070109 Adobe Macromedia ColdFusion Source Code Disclosure Vulnerability third-party-advisory
- 1017490 vdb-entry
- 21978 vdb-entry
- 32123 vdb-entry
- ADV-2007-0116 vdb-entry
- coldfusion-urlparsing-info-disclosure(31411) vdb-entry