Adobe ColdFusion CVE-2010-2861 Directory Traversal Vulnerability

Bugtraq ID:	42342
Class:	Input Validation Error
CVE:	CVE-2010-2861
Remote:	Yes
Local:	No
Published:	Aug 10 2010 12:00AM
Updated:	Mar 16 2011 01:58PM
Credit:	Richard Brain of ProCheckUp Ltd
Vulnerable:	Adobe ColdFusion 8.0.1 Adobe ColdFusion 9.0.1 Adobe ColdFusion 9.0 Adobe ColdFusion 8.0
Not Vulnerable:

Adobe ColdFusion CVE-2010-2861 Directory Traversal Vulnerability

Adobe ColdFusion is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks.

Adobe ColdFusion 9.0.1 and prior are vulnerable.

Adobe ColdFusion CVE-2010-2861 Directory Traversal Vulnerability

Attackers can exploit this issue through a browser.

Immunity has released the following exploit to members of the Immunity Partners program:

https://www.immunityinc.com/downloads/immpartners/CEU_CF_directory_traversal.zip

The following exploit code is available as a module from the Metasploit Framework:

• /data/vulnerabilities/exploits/42342.rb

Adobe ColdFusion CVE-2010-2861 Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references for more information.

Adobe ColdFusion CVE-2010-2861 Directory Traversal Vulnerability

References:

• Adobe ColdFusion Homepage (Adobe)
  
• Adobe Homepage (Adobe)
  
• ColdFusion directory traversal FAQ (CVE-2010-2861) (pagvac)
  
• PR10-07 Unauthenticated File Retrieval (traversal) within ColdFusion administrat (Procheckup)
  
• Security update: Hotfix available for ColdFusion (Adobe)