PT-2005-5029 · Adobe · Coldfusion

Published 2005-12-17 · Updated 2011-03-08 · CVE-2005-4342

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 6.0 through 7.0

Description The issue allows remote attackers to bypass security controls because the ColdFusion Sandbox does not throw an exception when the SecurityManager is disabled.

Recommendations For Adobe ColdFusion versions 6.0 through 7.0, consider enabling the SecurityManager to prevent bypassing of security controls.

Fix

Related Identifiers

CVE-2005-4342

Affected Products

Coldfusion

References · 7

• http://secunia.com/advisories/18078 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4342 · Security Note
• http://securityfocus.com/bid/15904 · Patch
• http://macromedia.com/devnet/security/security_zone/mpsb05-12.html · Patch
• http://securitytracker.com/id?1015369 · Vendor Advisory
• http://macromedia.com/devnet/security/security_zone/mpsb05-14.html · Patch
• http://vupen.com/english/advisories/2005/2948 · Note