Macromedia ColdFusion MX Template Handling Privilege Escalation Vulnerability

Bugtraq ID:	11316
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 04 2004 12:00AM
Updated:	Oct 04 2004 12:00AM
Credit:	Discovery of this issue is credited to Eric Lackey <[email protected]>.
Vulnerable:	Macromedia ColdFusion MX 6.1
Not Vulnerable:

Macromedia ColdFusion MX Template Handling Privilege Escalation Vulnerability

Reportedly Macromedia ColdFusion MX is affected by privilege escalation vulnerability when handling templates. This issue is due to an access validation error that allows a user to perform actions with administrator privileges.

An attacker may exploit this issue to gain administrative privileges on a computer running the vulnerable application.

Macromedia ColdFusion MX Template Handling Privilege Escalation Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/coldFusionTemplatePrivEscPOC.txt

Macromedia ColdFusion MX Template Handling Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Macromedia ColdFusion MX Template Handling Privilege Escalation Vulnerability

References:

• ColdFusion MX Home Page (Macromedia)
  
• Macromedia Homepage (Macromedia)