Vulnerabilities > CVE-2004-2505 - Unspecified vulnerability in Macromedia Coldfusion 5.0/6.0

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
macromedia
exploit available
NVD
Published: 2004-12-31
Updated: 2024-11-20

Summary

Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service (memory consumption and crash) by sending repeated GET or POST requests that trigger error messages that use long strings of data.

Vulnerable Configurations

Part Description Count
Application
Macromedia
2

Exploit-Db

descriptionMacromedia ColdFusion MX 6.0 Oversized Error Message Denial Of Service Vulnerability. CVE-2004-2505. Dos exploits for multiple platform
idEDB-ID:24013
last seen2016-02-02
modified2004-04-17
published2004-04-17
reporterK. K. Mookhey
sourcehttps://www.exploit-db.com/download/24013/
titleMacromedia ColdFusion MX 6.0 - Oversized Error Message Denial of Service Vulnerability

References