NVD

Id
54045  
Name
CVE-2007-1874  
Description
Adobe ColdFusion MX 7 for Linux and Solaris uses insecure permissions for certain scripts and directories, which allows local users to execute arbitrary code or obtain sensitive information via the (1) CFMX7DreamWeaverExtensions.mxp, (2) CFReportBuilderInstaller.exe, (3) .com.zerog.registry.xml, (4) uninstall.lax, (5) license.txt, (6) Readme.htm, (7) .com.zerog.registry.xml, (8) k2adminstop, or (9) k2adminstart files; or (10) certain files in lib/wsconfig/.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-04-11  
Modified Date
2011-03-07  
Seq
2007-1874  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
274108 54045 CVE-2007-1874 20070410 Adobe Macromedia ColdFusion MX7 Insecure File Permissions Vulnerability  View
274109 54045 CVE-2007-1874 http://www.adobe.com/support/security/bulletins/apsb07-08.html  View
274110 54045 CVE-2007-1874 23405  View
274111 54045 CVE-2007-1874 1017899  View
274112 54045 CVE-2007-1874 ADV-2007-1341  View
274113 54045 CVE-2007-1874 coldfusion-verity-privilege-escalation(33571)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53097 JVNDB-2007-001789 Adobe ColdFusion MX における任意のコードを実行される脆弱性 Adobe ColdFusion MX は、スクリプトおよびディレクトリ内で特定の安全でないパーミッションを使用するため、任意のコードを実行される、または重要な情報を取得される脆弱性が存在します。 CVE-2007-1874 25229 CVE-2007-1874 54045 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001789.html 2007-04-10 2012-06-26 View