CVE-2007-1874
Last modified
CVE-2007-1874 is a vulnerability of currently unknown severity. Adobe ColdFusion MX 7 for Linux and Solaris uses insecure permissions for certain scripts and directories, which allows local users to execute arbitrary code or obtain sensitive information via the (1) CFMX7DreamWeaverExtensions.mxp, (2) CFReportBuilderInstaller.exe, (3) .com.zerog.registry.xml, (4) uninstall.lax, (5) license.txt, (6) Readme.htm, (7) .com.zerog.registry.xml, (8) k2adminstop, or (9) k2adminstart files; or (10) certain files in lib/wsconfig/.. EPSS estimates a 0.80% chance of exploitation in the next 30 days.
Description
Adobe ColdFusion MX 7 for Linux and Solaris uses insecure permissions for certain scripts and directories, which allows local users to execute arbitrary code or obtain sensitive information via the (1) CFMX7DreamWeaverExtensions.mxp, (2) CFReportBuilderInstaller.exe, (3) .com.zerog.registry.xml, (4) uninstall.lax, (5) license.txt, (6) Readme.htm, (7) .com.zerog.registry.xml, (8) k2adminstop, or (9) k2adminstart files; or (10) certain files in lib/wsconfig/.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Coldfusion | 7.0 |
References
- http://secunia.com/advisories/24850Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb07-08.htmlPatch, Vendor Advisory
- http://secunia.com/advisories/24850Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb07-08.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-1874?
How severe is CVE-2007-1874?
How do I fix CVE-2007-1874?
Are you affected by CVE-2007-1874?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST