CVE-2001-1427: High severity Macromedia ColdFusion vulnerability
Published Jul 11, 2001
·Updated
Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via unknown attack vectors.
Affected Software
12 affected components
Macromedia ColdFusion=4.5.1-sp2
Macromedia ColdFusion=4.5
Macromedia ColdFusion=2.0
Macromedia ColdFusion=4.0.1
Macromedia ColdFusion=3.0
Macromedia ColdFusion=4.5.1-sp1
Macromedia ColdFusion=4.0
Macromedia ColdFusion=3.1
Macromedia ColdFusion=3.1.1
Macromedia ColdFusion=4.5.1
Macromedia ColdFusion=3.1.2
Macromedia ColdFusion=3.0.1
Remediation
Patch Available
Patch Available
Event History
Jul 11, 2001
CVE Published
04:00 AM
Mar 22, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1427?
CVE-2001-1427 is classified as a medium severity vulnerability.
2
How do I fix CVE-2001-1427?
To fix CVE-2001-1427, upgrade your ColdFusion Server to a version that is not affected by this vulnerability.
3
What happens if my system is vulnerable to CVE-2001-1427?
If your system is vulnerable to CVE-2001-1427, attackers could overwrite templates with zero byte files, potentially disrupting your applications.
4
Which versions of ColdFusion are affected by CVE-2001-1427?
CVE-2001-1427 affects ColdFusion Server versions 2.0 through 4.5.1 SP2.
5
Is there a known exploit for CVE-2001-1427?
Yes, there are various attack vectors that could exploit CVE-2001-1427, allowing unauthorized access to file overwrite functionality.