CVE-1999-0923

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Mar 12, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-09245.0The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.CVE-1999-09255.0UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.CVE-1999-092610.0Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.CVE-1999-09275.0NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-1999-09285.0Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.CVE-1999-09295.0Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTPCVE-1999-09315.0Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.CVE-1999-09327.2Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file.CVE-1999-09335.0TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-1999-09345.0classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.CVE-1999-093510.0classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.CVE-1999-09387.5MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages.
CVE-1999-0923: High severity, CVSS 7.5 | Vulnix