CVE-2005-4342
Summary
| CVE | CVE-2005-4342 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-12-19 03:47:00 UTC |
| Updated | 2011-03-08 02:28:00 UTC |
| Description | ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to "bypass security controls," aka "JRun Clustered Sandbox Security Vulnerability." |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Macromedia | Coldfusion | 6.0 | All | All | All |
| Application | Macromedia | Coldfusion | 6.1 | All | All | All |
| Application | Macromedia | Coldfusion | 6.1 | All | enterprise_with_jrun | All |
| Application | Macromedia | Coldfusion | 6.1 | All | j2ee_application_server | All |
| Application | Macromedia | Coldfusion | 7.0 | All | All | All |
| Application | Macromedia | Coldfusion | 6.0 | All | All | All |
| Application | Macromedia | Coldfusion | 6.1 | All | All | All |
| Application | Macromedia | Coldfusion | 6.1 | All | enterprise_with_jrun | All |
| Application | Macromedia | Coldfusion | 6.1 | All | j2ee_application_server | All |
| Application | Macromedia | Coldfusion | 7.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Macromedia - MPSB05-14 : Cumulative Security Updater for ColdFusion MX 7 | CONFIRM | www.macromedia.com | Patch |
| Macromedia Cold Fusion MX Multiple Vulnerabilities | BID | www.securityfocus.com | Patch |
| Macromedia - MPSB05-12 : Sandbox Security and CFMAIL Vulnerability in ColdFusion MX 6.X | CONFIRM | www.macromedia.com | Patch |
| ColdFusion MX Bugs Let Remote Users Bypass Sandbox Restrictions and Attach and E-mail Arbitrary Files - SecurityTracker | SECTRACK | securitytracker.com | Patch, Vendor Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| Secunia - Advisories - Macromedia ColdFusion Multiple Vulnerabilities | SECUNIA | secunia.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.