CVE-2011-0581: Input Validation
Published Feb 10, 2011
·Updated
Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags.
Affected Software
4 affected components
Adobe ColdFusion=8.0
Adobe ColdFusion=9.0
Adobe ColdFusion=8.0.1
Adobe ColdFusion=9.0.1
Remediation
Event History
Feb 10, 2011
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-0581?
The severity of CVE-2011-0581 is high due to the potential for remote attackers to exploit CRLF injection vulnerabilities.
2
How do I fix CVE-2011-0581?
To fix CVE-2011-0581, apply the latest security patches provided by Adobe for ColdFusion versions 8.0 through 9.0.1.
3
What systems are affected by CVE-2011-0581?
CVE-2011-0581 affects Adobe ColdFusion versions 8.0, 8.0.1, 9.0, and 9.0.1.
4
What type of attack can be conducted through CVE-2011-0581?
CVE-2011-0581 can be exploited to conduct HTTP response splitting attacks.
5
Are there any workarounds for CVE-2011-0581?
There are no specific workarounds recommended for CVE-2011-0581; updating to a patched version is the best solution.