CVE-2007-1874
published 2007-04-11CVE-2007-1874: Adobe ColdFusion MX 7 for Linux and Solaris uses insecure permissions for certain scripts and directories, which allows local users to execute arbitrary code…
PriorityP425high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.84%
54.1th percentile
Adobe ColdFusion MX 7 for Linux and Solaris uses insecure permissions for certain scripts and directories, which allows local users to execute arbitrary code or obtain sensitive information via the (1) CFMX7DreamWeaverExtensions.mxp, (2) CFReportBuilderInstaller.exe, (3) .com.zerog.registry.xml, (4) uninstall.lax, (5) license.txt, (6) Readme.htm, (7) .com.zerog.registry.xml, (8) k2adminstop, or (9) k2adminstart files; or (10) certain files in lib/wsconfig/.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | coldfusion | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=510http://osvdb.org/34930http://secunia.com/advisories/24850http://www.adobe.com/support/security/bulletins/apsb07-08.htmlhttp://www.securityfocus.com/bid/23405http://www.securitytracker.com/id?1017899http://www.vupen.com/english/advisories/2007/1341https://exchange.xforce.ibmcloud.com/vulnerabilities/33571http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=510http://osvdb.org/34930http://secunia.com/advisories/24850http://www.adobe.com/support/security/bulletins/apsb07-08.htmlhttp://www.securityfocus.com/bid/23405http://www.securitytracker.com/id?1017899http://www.vupen.com/english/advisories/2007/1341https://exchange.xforce.ibmcloud.com/vulnerabilities/33571
2007-04-11
Published