CVE-2004-2204

Summary

Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag enabled, allows local users to conduct unauthorized activities and obtain administrative passwords by creating CFML scripts that use CreateObject or CFOBJECT.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/archive/1/377213
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17567
• http://secunia.com/advisories/12693
• http://www.osvdb.org/10718
• http://www.securityfocus.com/bid/11364
• http://www.macromedia.com/devnet/security/security_zone/mpsb04-10.html

References

• http://www.securityfocus.com/archive/1/377213
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17567
• http://secunia.com/advisories/12693
• http://www.osvdb.org/10718
• http://www.securityfocus.com/bid/11364
• http://www.macromedia.com/devnet/security/security_zone/mpsb04-10.html

• ←Previous
• Next→