CVE-2005-4344
2.1
CVSS SCORE
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local users to create an object despite the specified configuration.
CVSS Vector Details
Attack Vector
Local
Attack Complexity
Low
Confidentiality
None
Integrity
P
Availability
None
Affected Software Configurations
- a macromedia coldfusion 7.0 * * * * * * *
Weaknesses (CWE)
- NVD-CWE-Other
References & External Links
- http://secunia.com/advisories/18078
- http://securitytracker.com/id?1015371
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html
- http://www.securityfocus.com/bid/15904
- http://www.vupen.com/english/advisories/2005/2948
- http://secunia.com/advisories/18078
- http://securitytracker.com/id?1015371
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html
- http://www.securityfocus.com/bid/15904
- http://www.vupen.com/english/advisories/2005/2948