Macromedia ColdFusion Lets Remote Users Deny Service By Sending Many Form Fields
Categorie: Vulnerability Posted: 2004-01-30 by ReCall Views: 374 Source: Click here
Current Rating: Not rated
Details
Description: A vulnerability was reported in Macromedia ColdFusion in the processing of form fields. A remote user can cause denial of service conditions on the target system.
It is reported that a remote user can submit a bogus request containing a large number (e.g., several hundred) of form fields to cause ColdFusion MX 6.1 to take an excessive amount of time to process the request.
Macromedia has assigned an "Important" severity rating to this flaw.
Macromedia credits Michael Leahy of Grand Valley State University with reporting this vulnerability.
Impact: A remote user can cause the target ColdFusion service to consume an excessive amount of time processing a malicious request.
Solution: The vendor has released a Form fields DoS patch (19 KB ZIP), available at:
