VULHUB ™

ColdFusion is a Web Application software packaged distributed and maintained by Allaire. The CFRETHROW tag causes a crash in the ColdFusion server when it's use is attempted on a ColdFusion/Linux server combination. Upon receipt of the tag, ColdFusion crashes creating a core file in the coldfusion/logs subdirectory of the ColdFusion installation directory. This problem allows a user to crash a ColdFusion server, and potentially gain access to sensitive information about the server.

ColdFusion is a Web Application software packaged distributed and maintained by Allaire. The CFRETHROW tag causes a crash in the ColdFusion server when it's use is attempted on a ColdFusion/Linux server combination. Upon receipt of the tag, ColdFusion crashes creating a core file in the coldfusion/logs subdirectory of the ColdFusion installation directory. This problem allows a user to crash a ColdFusion server, and potentially gain access to sensitive information about the server.