CVE-2001-0535 Vulnerability Details

  /     /     /  

CVE-2001-0535 Metadata Quick Info

CVE Published: 12/10/2001 | CVE Updated: 08/08/2024 | CVE Year: 2001
Source: mitre | Vendor: n/a | Product: n/a
Status : PUBLISHED

---

CVE-2001-0535 Description

Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host\'s domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: n/a
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).