ColdFusion Security Question

Question

Hello, lately we have had several interesting messages in our log files. I was wondering if any of you might shed some light on what may have caused these. The messages are below. What I find interesting is that these errors always occur together. Do you think someone is looking for a weakness on our server? Here's another question. Is it possible to change the location of the ColdFusion Administrator so it is not accessable at /cfide/administrator/ but at a different address? Thanks for any help you may provide.

"Error","jrpp-3583","10/05/09","09:54:13",,"Probe requests must originate from localhost, 127.0.0.1 The specific sequence of files included or processed is: C:\Inetpub\wwwroot\CFIDE\probe.cfm, line: 53 "

"Error","jrpp-3595","10/05/09","10:01:29",,"Invalid request of Application.cfm, Application.cfc, or OnRequestEnd.cfm file.You have requested a page with the name application.cfm. This file name is reserved by the ColdFusion engine for the specification of application level settings; as a result, it cannot be directly requested from a web client. <p> If you are creating a template that is intended for direct access by end users, use a name other than Application.cfm or OnRequestEnd.cfm. The specific sequence of files included or processed is: C:\Inetpub\wwwroot\cfdocs\exampleapp\email\application.cfm'' "

"Error","jrpp-3601","10/05/09","10:09:14",,"Incorrect function The specific sequence of files included or processed is: E:\Web\nul..cfm'' "

If you are creating a template that is intended for direct access by end users, use a name other than Application.cfm or OnRequestEnd.cfm. The specific sequence of files included or processed is: C:\Inetpub\wwwroot\cfdocs\exampleapp\email\application.cfm'' ""Error","jrpp-3601","10/05/09","10:09:14",,"Incorrect function The specific sequence of files included or processed is: E:\Web ul..cfm'' "

ilssac · Answer

You also can remove the Administrator folder from your production server if you choose. I hear lots of people like to do this. You can copy that directory in when you need to update datasources or other settings and then remove it.

But personally I just do the original sugestion and have our CFIDE setup on a ColdFusion instance running on a website that is locked down by the webserver to only be accessible from our internal IP addresses.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded