CVE-2004-1815 Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consu...
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia coldfusion | = 6.0 | No fix listed |
| macromedia coldfusion | = 6.1 | No fix listed |
| macromedia jrun | = 4.0 | No fix listed |
| macromedia jrun | = 4.0-sp1 | No fix listed |
| macromedia jrun | = 4.0-sp1a | No fix listed |
| macromedia jrun | = 4.0_build_61650 | No fix listed |
| sun one application server | = 7.0 | No fix listed |
| sun one application server | = 7.0-ur1 | No fix listed |
| sun one application server | = 7.0-ur2 | No fix listed |
References
- 20040315 Multiple Vendor SOAP server array DoS mailing-list
- 11132 patch third-party-advisory vendor-advisory
- www.macromedia.com patch vendor-advisory
- 9877 patch vdb-entry vendor-advisory
- soap-array-dos(15473) vdb-entry