{"api_version":"1","generated_at":"2026-07-24T22:37:28+00:00","cve":"CVE-2005-4342","urls":{"html":"https://cve.report/CVE-2005-4342","api":"https://cve.report/api/cve/CVE-2005-4342.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-4342","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-4342"},"summary":{"title":"CVE-2005-4342","description":"ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to \"bypass security controls,\" aka \"JRun Clustered Sandbox Security Vulnerability.\"","state":"PUBLISHED","assigner":"mitre","published_at":"2005-12-19 03:47:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2005/2948","name":"http://www.vupen.com/english/advisories/2005/2948","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18078","name":"http://secunia.com/advisories/18078","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Secunia - Advisories - Macromedia ColdFusion Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html","name":"http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Macromedia - MPSB05-14 : Cumulative Security Updater for ColdFusion MX 7","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html","name":"http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Macromedia - MPSB05-12 : Sandbox Security and CFMAIL Vulnerability in ColdFusion MX 6.X","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/15904","name":"http://www.securityfocus.com/bid/15904","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Macromedia Cold Fusion MX Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1015369","name":"http://securitytracker.com/id?1015369","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"ColdFusion MX Bugs Let Remote Users Bypass Sandbox Restrictions and Attach and E-mail Arbitrary Files - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-4342","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-4342","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"4342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"macromedia","cpe5":"coldfusion","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"4342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"macromedia","cpe5":"coldfusion","cpe6":"6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"4342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"macromedia","cpe5":"coldfusion","cpe6":"6.1","cpe7":"*","cpe8":"enterprise_with_jrun","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"4342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"macromedia","cpe5":"coldfusion","cpe6":"6.1","cpe7":"*","cpe8":"j2ee_application_server","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"4342","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"macromedia","cpe5":"coldfusion","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T23:38:51.745Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"18078","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18078"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html"},{"name":"15904","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/15904"},{"name":"1015369","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1015369"},{"name":"ADV-2005-2948","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2005/2948"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-12-15T00:00:00.000Z","descriptions":[{"lang":"en","value":"ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to \"bypass security controls,\" aka \"JRun Clustered Sandbox Security Vulnerability.\""}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-02-26T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"18078","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18078"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html"},{"name":"15904","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/15904"},{"name":"1015369","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1015369"},{"name":"ADV-2005-2948","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2005/2948"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-4342","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to \"bypass security controls,\" aka \"JRun Clustered Sandbox Security Vulnerability.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"18078","refsource":"SECUNIA","url":"http://secunia.com/advisories/18078"},{"name":"http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html","refsource":"CONFIRM","url":"http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html"},{"name":"http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html","refsource":"CONFIRM","url":"http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html"},{"name":"15904","refsource":"BID","url":"http://www.securityfocus.com/bid/15904"},{"name":"1015369","refsource":"SECTRACK","url":"http://securitytracker.com/id?1015369"},{"name":"ADV-2005-2948","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2005/2948"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-4342","datePublished":"2005-12-17T23:00:00.000Z","dateReserved":"2005-12-17T00:00:00.000Z","dateUpdated":"2024-08-07T23:38:51.745Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-12-19 03:47:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B79C39FD-D9A0-4CA4-BF37-D94D9F20E4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B2C65BE0-32FA-4D51-AA2B-E7D630470D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:enterprise_with_jrun:*:*:*:*:*","matchCriteriaId":"88FB2C4B-E22D-4469-AD12-403A8E8B260C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:j2ee_application_server:*:*:*:*:*","matchCriteriaId":"5E448558-A9F6-4506-AA6D-688C73CEC61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:7.0:*:*:*:*:*:*:*","matchCriteriaId":"921E5A6D-8476-401B-9A18-BDBC07CA1CDB"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"4342","Ordinal":"1","Title":"CVE-2005-4342","CVE":"CVE-2005-4342","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"4342","Ordinal":"1","NoteData":"ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to \"bypass security controls,\" aka \"JRun Clustered Sandbox Security Vulnerability.\"","Type":"Description","Title":"CVE-2005-4342"},{"CveYear":"2005","CveId":"4342","Ordinal":"2","NoteData":"2005-12-17","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"4342","Ordinal":"3","NoteData":"2009-02-26","Type":"Other","Title":"Modified"}]}}}