Allaire Security Bulletin (ASB00-14): Workaround for Denial of Service Attack Against ColdFusion Administrator

 
May 29, 2000
Allaire was recently been notified by Foundstone, Inc. of a denial of service attack against an unprotected installation of the ColdFusion Administrator. The denial of service occurs during the process of converting the input password and the stored password into forms suitable for comparison when the input password is very large. It appears that this issue only affects ColdFusion Servers that have not followed Allaire's recommendations in the Allaire Security Best Practices article 10954. A workaround has been provided.

Allaire Security Bulletin (ASB00-14)

Privacy | FAQ | Site Map | About | Guidelines | Contact | Advertising | What is ColdFusion?
House of Fusion | ColdFusion Jobs | Blog of Fusion | AHP Hosting