CVE-2002-0576 json
ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP…
published 2002-06-18 24 y ago modified 2026-06-16 4 mo ago also EUVD-2002-0571
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.7%
- EPSS 2.7% chance of exploitation in 30 days, percentile 85%
- public exploits
- 0
- none known
Summary
ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message.
Patch / fix
- securityfocus.com/bid/4542 advisory
- iss.net/security_center/static/8866.php advisory
- macromedia.com/v1/handlers/index.cfm?ID=22906 advisory
Exploit prediction
2.65% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
References
-
securityfocus.com
/bid/4542
vdb-entry, patch, vendor-advisory
-
iss.net
/security_center/static/8866.php
vdb-entry, patch, vendor-advisory
-
macromedia.com
/v1/handlers/index.cfm?ID=22906
patch, vendor-advisory
-
online.securityfocus.com
/archive/1/268263
mailing-list
-
archives.neohapsis.com
/archives/vulnwatch/2002-q2/0028.html
mailing-list
-
osvdb.org
/3337
vdb-entry
Sources
- CVE List CVE-2002-0576
- NVD CVE-2002-0576
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.