https://www.exploit-db.com/exploits/19712
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200001-014

AllaireColdFusion是一个用来增强Web交互功能的组件。ColdFusion4.x包含一个叫做CFCACHE的功能，它通过储存HTML处理CFM页的输出来提高服务器的性能。当CFCACHE标签处理CFM页面时，它创建一些临时文件，其中一些文件是.tmp文件，其中包含了当前的HTML输出。同时它也创建一个名为cfcache.map的文件，其中包含了到.tmp文件的指针，内容有绝对路径、时间信息和其他URL信息。这些信息如果暴露出来可以造成潜在的危害。这些文件都放在同一个目录，并且可以通过外部的URL进行远程访问。

source: http://www.securityfocus.com/bid/917/info

ColdFusion 4.x includes a function called CFCACHE. This function improves server performance by caching the HTML output of processed CFM pages. 

When the CFCACHE tag is used in a CFM page, it creates temporary files. Some of these files are .tmp files, which contain the actual HTML output. It also creates a cfcache.map file, which contains pointers to the .tmp files including absolute pathnames, timestamps, and other URL information. This information could be potentially harmful if exposed to the public. These files are all placed in the same web-accessible directory as the CFM file itself, and can be remotely accessed via an explicit URL.

For any cfm file, request the corresponding cfcache.map file. 

For example, for the file:
http ://server/path/info.cfm
request:
http ://server/path/cfcache.map

The returned file will look something like this:

[info.cfm?product_id=9]
Mapping=C:InetpubwwwrootpathCFC155.tmp
SourceTimeStamp=10/06/1999 08:02:06 AM

来源:ALLAIRE
名称:ASB00-03
链接:http://www.allaire.com/handlers/index.cfm?ID=13978&Method;=Full
来源:BID
名称:917
链接:http://www.securityfocus.com/bid/917
来源：NSFOCUS
名称：232
链接：http://www.nsfocus.net/vulndb/232