Macromedia ColdFusion MX 6.1 Access Control Flaw Lets Objects Bypass Sandbox Security
|
|
SecurityTracker Alert ID: 1008877
|
|
CVE Reference: GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Jan 28 2004
|
Impact: Disclosure of user information, Modification of user information
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): MX 6.1 Enterprise, MX 6.1 J2EE
|
Description: A vulnerability was reported in Macromedia's ColdFusion. A Java object can bypass the sandbox security features.
It is reported that a remote authenticated user can create Java objects that can instantiate classes without using CreateObject()
or <cfobject> tags, thereby bypassing the ColdFusion MX 6.1 sandbox security features.
The vendor reports that ColdFusion MX
(aka version 6.0) and ColdFusion MX 6.1 Standard Edition are not vulnerable.
Macromedia has assigned a "critical" severity rating
to this issue.
|
Impact: A remote authenticated user (with privileges to create Java objects on the target system) can bypass sandbox security restrictions to access data and functions belonging to other objects.
|
Solution: Macromedia has released the Sandbox Security patch (7 KB ZIP) for ColdFusion MX 6.1, available at:
http://download.macromedia.com/pub/security/mpsb04-01.zip
|
Vendor URL: www.macromedia.com/devnet/security/security_zone/mpsb04-01.html (Links to External Site)
|
Cause: Access control error
|
Underlying OS: Linux (Any), UNIX (HP/UX), UNIX (Solaris - SunOS), Windows (NT), Windows (2000), Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Wed, 28 Jan 2004 16:32:54 -0500
Subject: http://www.macromedia.com/devnet/security/security_zone/mpsb04-01.html
|
http://www.macromedia.com/devnet/security/security_zone/mpsb04-01.html
> MPSB04-01 Security Patch available for ColdFusion MX sandbox security
Macromedia reported that a remote authenticated user can create Java objects that can
bypass the ColdFusion MX 6.1 sandbox security features. The report indicates that a user
can instantiate classes without using CreateObject() or <cfobject> tags.
The vendor reports that ColdFusion MX (aka version 6.0) and ColdFusion MX 6.1 Standard
edition are not vulnerable.
Macromedia has assigned a "critical" severity rating to this issue.
Macromedia has released the Sandbox Security patch (7 KB ZIP) for ColdFusion MX 6.1,
available at:
http://download.macromedia.com/pub/security/mpsb04-01.zip
|
|
