CVE-1999-0455

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/115Vendor Advisory
http://www.securityfocus.com/bid/115Vendor Advisory

Timeline

Published: Dec 25, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-04577.2Linux ftpwatch program allows local users to gain root privileges.CVE-1999-04582.1L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.CVE-1999-04594.6Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.CVE-1999-04602.1Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.CVE-1999-046110.0Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a so CVE-1999-04627.2suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid CVE-1999-04642.1Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.CVE-1999-046510.0Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.CVE-1999-04667.2The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associat CVE-1999-04675.0The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.CVE-1999-04688.2Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.CVE-1999-04695.0Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the cli