Macromedia ColdFusion MX 6.0 - Error Message Full Path Disclosure

Related Vulnerabilities: CVE-2003-1469  
Publish Date: 26 Apr 2003
                							

                source: http://www.securityfocus.com/bid/7443/info

A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers.

When certain malformed URL requests are received by the server, an error message is returned containing the full path of the ColdFusion installation.

http://host:8500/CFIDE/probe.cfm