CVE-2000-0189
published 2000-03-01CVE-2000-0189: ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
PriorityP417medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.93%
77.5th percentile
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| allaire | coldfusion_server | — | — |
| allaire | coldfusion_server | — | — |
| allaire | coldfusion_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET EXPLOIT CVE-2016-0189 Common Construct M1
suricata·2016-07-15·CVSS 7.5
CVE-2016-0189 [HIGH] ET EXPLOIT CVE-2016-0189 Common Construct M1
ET EXPLOIT CVE-2016-0189 Common Construct M1
Rule: alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT CVE-2016-0189 Common Construct M1"; flow:established,to_client; file.data; content:"%u0008%u4141%u4141%u4141"; nocase; content:"redim"; nocase; content:"Preserve"; content:"2000"; distance:0; pcre:"/^\s*?\x29/Rs"; content:"%u400C%u0000%u0000%u0000"; nocase; reference:url,theori.io/research/cve-2016-0189; reference:cve,2016-0189; classtype:attempted-user; sid:2022971; rev:4; metadata:affected_product Windows_XP_Vista_7_8_10_Server_32_64_Bit, attack_target Client_Endpoint, created_at 2016_07_15, cve CVE_2016_0189, deployment Perimeter, performance_impact Low, signature_severity Major, tag CVE_2016_0189, tag CISA_KEV, updated_at 2024_03_14;)
No public exploits indexed.
No writeups or analysis indexed.
2000-03-01
Published