PT-2005-5029 · Adobe · Coldfusion

Publicado 2005-12-17 · Atualizado 2011-03-08 · CVE-2005-4342

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 6.0 through 7.0

Description The issue allows remote attackers to bypass security controls because the ColdFusion Sandbox does not throw an exception when the SecurityManager is disabled.

Recommendations For Adobe ColdFusion versions 6.0 through 7.0, consider enabling the SecurityManager to prevent bypassing of security controls.

Correção

Identificadores relacionados

CVE-2005-4342

Produtos afetados

Coldfusion

Referências · 7

• http://secunia.com/advisories/18078 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4342 · Nota de Segurança
• http://securityfocus.com/bid/15904 · Correção
• http://vupen.com/english/advisories/2005/2948 · Nota
• http://macromedia.com/devnet/security/security_zone/mpsb05-12.html · Correção
• http://securitytracker.com/id?1015369 · Aviso do Fabricante
• http://macromedia.com/devnet/security/security_zone/mpsb05-14.html · Correção