The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.
References
Link | Resource |
---|---|
http://www.allaire.com/handlers/index.cfm?ID=15411&Method=Full | Patch Vendor Advisory |
http://www.securityfocus.com/bid/1181 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2000-04-23 21:00
Updated : 2008-09-10 12:04
NVD link : CVE-2000-0334
Mitre link : CVE-2000-0334
JSON object : View
CWE
Products Affected
allaire
- spectra