Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Adobe ColdFusion MX 7 for Linux and Solaris uses insecure permissions for certain scripts and directories, which allows local users to execute arbitrary code or obtain sensitive information via the (1) CFMX7DreamWeaverExtensions.mxp, (2) CFReportBuilderInstaller.exe, (3) .com.zerog.registry.xml, (4) uninstall.lax, (5) license.txt, (6) Readme.htm, (7) .com.zerog.registry.xml, (8) k2adminstop, or (9) k2adminstart files; or (10) certain files in lib/wsconfig/.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Adobe ColdFusion不安全文件访问权限漏洞
Vulnerability Description
ColdFusion MX是一款高效的网络应用服务器开发环境，具有很高的易用性和开发效率，基于标准的Java技术，可以与XML、Web Services和Microsoft .NET环境相集成。 Adobe的补丁在设置目录访问权限时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 Adobe安全公告APSB06-17中所提供补丁的目录结构中没有正确的设置目录权限。该补丁中的一个文档是从当前的Verity目录中获得的，而该文档中包含有多个完全可写的文件和目录，这可能允许攻击者替换或编辑受影响的文件，然后在
CVSS Information
N/A
Vulnerability Type
N/A