CVE-2005-4343

概要

参考情報

• secunia.com/advisories/18078 · Patch
• securitytracker.com/id · Patch
• macromedia.com/devnet/security/security_zone/mpsb05-12.html · Patch
• macromedia.com/devnet/security/security_zone/mpsb05-14.html · Patch
• securityfocus.com/bid/15904 · Patch
• vupen.com/english/advisories/2005/2948

coldfusion のその他の脆弱性

• CVE-2006-3979高 7.2The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the Cold…
• CVE-2006-2364中 5.8Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject …
• CVE-2005-4345高 7.2Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers t…
• CVE-2005-4344低 2.1Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local u…
• CVE-2005-4342高 7.5ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the Security…