OSVDB ID: 80008 Title: Adobe ColdFusion Hash Collision Form Parameter Parsing Remote DoS |
Info |
|
|
Dates |
||||
|
|
Description |
Adobe ColdFusion contains a flaw that may allow a remote denial of service. The issue is triggered when an attacker sends multiple crafted parameters which trigger hash collisions, and will result in loss of availability for the program via CPU consumption. |
Classification |
Location:
Remote / Network Access
Attack Type: Denial of Service Impact: Loss of Availability Solution: Patch / RCS Exploit: Exploit Unknown Disclosure: Vendor Verified OSVDB: Web Related |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Adobe has released a patch to address this vulnerability. Check the vendor advisory in the references section. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |