Test ID:	1.3.6.1.4.1.25623.1.0.10581
Category:	Web application abuses
Title:	Cold Fusion Administration Page Overflow
Summary:	A denial of service vulnerability exists within the Allaire; ColdFusion web application server (version 4.5.1 and earlier) which allows an; attacker to overwhelm the web server and deny legitimate web page requests.
Description:	Summary: A denial of service vulnerability exists within the Allaire ColdFusion web application server (version 4.5.1 and earlier) which allows an attacker to overwhelm the web server and deny legitimate web page requests. Vulnerability Impact: By downloading and altering the login HTML form an attacker can send overly large passwords (> 40.0000 chars) to the server, causing it to stop responding. Solution: Use HTTP basic authentication to restrict access to this page or remove it entirely if remote administration is not a requirement. A patch should be available from the vendor. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2000-0538 Allaire Security Bulletin: ASB00-14 http://www.allaire.com/handlers/index.cfm?ID=16122&Method=Full BugTraq ID: 1314 http://www.securityfocus.com/bid/1314 Bugtraq: 20000607 New Allaire ColdFusion DoS (Google Search) http://marc.info/?l=bugtraq&m=96045469627806&w=2 http://www.osvdb.org/3399 XForce ISS Database: coldfusion-parse-dos(4611) https://exchange.xforce.ibmcloud.com/vulnerabilities/4611
Copyright	Copyright (C) 2000 Matt Moore

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.