SecurityTeam US
 
 Welcome to SecurityTeam US
 Monday, February 06 2012 @ 11:39 AM EST

ColdFusion MX Sensitive Information Disclosure and Denial of Service

   
MacromediaTwo vulnerabilities have been reported in ColdFusion MX Server, which can be exploited by malicious people to disclose sensitive information and cause a DoS (Denial of Service).

The vulnerabilities reportedly affect version 6.0, 6.1 and 6.1 J2EE - JRun.

SOLUTION:
Apply updates.

ColdFusionMX 6.0:
http://www.macromedia.com/support/coldfusion/downloads_updates.html#updater

ColdFusionMX 6.1 Standard/Enterprise:
http://www.macromedia.com/cfusion/resourcecenter/rc_driver.cfm?pagename=cfmx%20updater

ColdFusion MX 6.1 J2EE (JRun):
http://www.macromedia.com/support/jrun/updaters.html

PROVIDED AND/OR DISCOVERED BY:
The vendor credits iDefense.

ORIGINAL ADVISORY:
http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html
 

What's Related

Story Options

ColdFusion MX Sensitive Information Disclosure and Denial of Service | 0 comments | Create New Account
The following comments are owned by whomever posted them. This site is not responsible for what they say.
 Copyright © 2012 SecurityTeam US
 All trademarks and copyrights on this page are owned by their respective owners.
  Get Firefox!
Dedicated Servers
Created this page in 0.16 seconds