CVE-2006-5858

Adobe ColdFusion 7.0-7.0.2 and JRun 4 - Unauthenticated Arbitrary File Read via Double URL-Encoded NULL Byte

Title source: llm

Description

Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte in a ColdFusion filename, such as a CFM file.

References (9)

Core 9

Core References

Patch, Vendor Advisory x_refsource_confirm

http://www.adobe.com/support/security/bulletins/apsb07-02.html

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/457799/100/0/threaded

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/23668

Broken Link third-party-advisory x_refsource_idefense

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=466

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1017490

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/21978

Broken Link vdb-entry x_refsource_osvdb

http://osvdb.org/32123

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/0116

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/31411

Scores

EPSS 0.1291

EPSS Percentile 95.8%

Details

CWE

CWE-200

Status published

Products (2)

adobe/coldfusion 7.0 - 7.0.2

adobe/jrun 4.0

Published Dec 31, 2006

Tracked Since Feb 18, 2026