CVEvulnerability
CVE-2007-1874
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-04-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Adobe ColdFusion MX 7 for Linux and Solaris uses insecure permissions for certain scripts and directories, which allows local users to execute arbitrary code or obtain sensitive information via the (1) CFMX7DreamWeaverExtensions.mxp, (2) CFReportBuilderInstaller.exe, (3) .com.zerog.registry.xml, (4) uninstall.lax, (5) license.txt, (6) Readme.htm, (7) .com.zerog.registry.xml, (8) k2adminstop, or (9) k2adminstart files; or (10) certain files in lib/wsconfig/.
Affected configurations
• adobe coldfusion 7.0
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=510 Vendor Advisory
- http://osvdb.org/34930 osvdb.org
- http://secunia.com/advisories/24850 Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb07-08.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/23405 www.securityfocus.com
- http://www.securitytracker.com/id?1017899 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1341 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33571 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=510 Vendor Advisory
- http://osvdb.org/34930 osvdb.org
- http://secunia.com/advisories/24850 Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb07-08.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/23405 www.securityfocus.com
- http://www.securitytracker.com/id?1017899 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1341 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33571 exchange.xforce.ibmcloud.com