CVE-2004-2505

Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service (memory consumption and crash) by sending repeated GET or POST requests that trigger error messages that use long strings of data.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Affected products

• Coldfusion (Macromedia)

References

• http://archives.neohapsis.com/archives/bugtraq/2004-04/0184.html
• http://www.securityfocus.com/bid/10163
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15895