CVE-2005-4342

Published: Dec 19, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to "bypass security controls," aka "JRun Clustered Sandbox Security Vulnerability."

Affected (5)

Products: Macromedia: Coldfusion

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Macromedia Coldfusion	Version 6.0
Macromedia Coldfusion	Version 6.1
Macromedia Coldfusion	Version 6.1
Macromedia Coldfusion	Version 6.1
Macromedia Coldfusion	Version 7.0

References (12)

http://secunia.com/advisories/18078

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1015369

Source: cve@mitre.org

PatchVendor Advisory

http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html

Source: cve@mitre.org

Patch

http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/15904

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2005/2948

Source: cve@mitre.org

http://secunia.com/advisories/18078

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://securitytracker.com/id?1015369

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/15904

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2005/2948

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.