CVE-2007-1874 | BDVDB-2026-23409 Detail
Description#
Adobe ColdFusion MX 7 for Linux and Solaris uses insecure permissions for certain scripts and directories, which allows local users to execute arbitrary code or obtain sensitive information via the (1) CFMX7DreamWeaverExtensions.mxp, (2) CFReportBuilderInstaller.exe, (3) .com.zerog.registry.xml, (4) uninstall.lax, (5) license.txt, (6) Readme.htm, (7) .com.zerog.registry.xml, (8) k2adminstop, or (9) k2adminstart files; or (10) certain files in lib/wsconfig/.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.vupen.com/english/advisories/2007/1341
- http://www.adobe.com/support/security/bulletins/apsb07-08.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=510
- http://www.securityfocus.com/bid/23405
- http://secunia.com/advisories/24850
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33571
- http://www.securitytracker.com/id?1017899
- http://osvdb.org/34930
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.