Adobe ColdFusion MX Verity Library Local Privilege Escalation Vulnerability

Bugtraq ID:	20431
Class:	Design Error
CVE:	CVE-2006-3978
Remote:	No
Local:	Yes
Published:	May 25 2006 12:00AM
Updated:	Oct 11 2006 11:19PM
Credit:	Information Risk Management Plc is credited with the discovery of this vulnerability
Vulnerable:	Adobe ColdFusion MX 7.02 Adobe ColdFusion MX 7.01 Adobe ColdFusion MX 7.00
Not Vulnerable:

Adobe ColdFusion MX Verity Library Local Privilege Escalation Vulnerability

Adobe ColdFusion MX is prone to a local privilege-escalation vulnerability.

An attacker can exploit this issue to gain administrative privileges on the affected computer. A successful exploit would lead to the complete compromise of affected computers.

Versions 7.00, 7.01, and 7.02 are vulnerable to this issue.

Adobe ColdFusion MX Verity Library Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe ColdFusion MX Verity Library Local Privilege Escalation Vulnerability

Solution:
The vendor has released an update to address this issue. Please see the referenced advisory for information on how to obtain and apply this update.

Adobe ColdFusion MX Verity Library Local Privilege Escalation Vulnerability

References:

• Adobe Cold Fusion MX Home Page (Adobe)
  
• Adobe Security Advisory APSB06-17 (Adobe)