Full Disclosure mailing list archives

Macromedia ColdFusion

From: roman.kunz () juliusbaer com
Date: Wed, 2 Mar 2005 11:28:36 +0100

hi folk,

i'm interested in informations about ColdFusion exploits in the Wild.
One of my Systems has been hacked and we could not figure out how. But 
it's probably for sure that they got access through ColdFusion running on 
said box.
(they started a new apache instance with the ColdFusion User).

any help, info?
tia
roman

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

Kernelpanik Labs Digest 2005-2 Kernelpanik Labs - Security Lists (Mar 01)
- Bluesnarf attacks Constantin Hofstetter (Mar 01)
  - Re: Bluesnarf attacks KF (lists) (Mar 01)
    - Re: Bluesnarf attacks Constantin Hofstetter (Mar 01)
    - Re: Bluesnarf attacks stonersavant (Mar 02)
  - Re: Bluesnarf attacks Davide Del Vecchio (Mar 01)
    - Macromedia ColdFusion roman . kunz (Mar 02)
  - Re: Bluesnarf attacks Adam Laurie (Mar 02)