Unscored severity · published Oct 5, 2004
CVE-2004-0928
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp,…
–
CVSS
4.1%
EPSS
No
On KEV
Description
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".
Exploitation
Is it being used?
Exploit prediction (EPSS)4.1% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Coldfusion · Macromedia
6.0; 6.1 · source: NVD
CE
Cosminexus Enterprise · Hitachi
01_01_1; 01_01_1; 01_02_2; 01_02_2 · source: NVD
CS
Cosminexus Server · Hitachi
web_01-01_1; web_01-01_2 · source: NVD
JR
Jrun · Macromedia
3.0; 3.1; 4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0928
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0928
marc.info
http://marc.info/?l=bugtraq&m=109621995623823&w=2
Patch
http://secunia.com/advisories/12638/
Patch
http://secunia.com/advisories/12647/
Patch
http://www.idefense.com/application/poi/display?id=148&type=vulnerabilities
Patch
http://www.kb.cert.org/vuls/id/977440
Patch
http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html
More from Cosminexus Enterprise
–
CVE-2004-1478
JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session