Allaire Security Bulletin (ASB00-07): 'Microsoft Internet Information Server Exposure of Source Code with Malformed Hit Highlighting Arguments'
Allaire's Security Zone has posted a recommendation that developers and customers follow the instructions posted on the Microsoft Web site to address a vulnerability for Microsoft IIS. The problem exposes the ability to use a malformed URL to read the source code of ASP, CFML, Perl and other files that are on a server. This is not a problem with ColdFusion Server itself, but it is an issue that can affect ColdFusion users.
Allaire Security Bulletin (ASB00-07)