A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests (port 8500) are received by the server, an error message is returned containing the full path of the ColdFusion installation.

Change the 'Debugging Settings' on the Administrator console of the ColdFusion server. This can be achieved by disabling the 'Enable Robust Exception Information' option.