All the latest UK technology news, reviews and analysis


Adobe posts patch for ColdFusion server flaw

17 Jan 2013
Adobe headquarters in San Jose

Administrators running Adobe ColdFusion are being advised to update their servers following the release of a security patch.

The company said that the update would address a handful privilege elevation in the web application server platform. The update covers both ColdFusion 9 and 10 builds for the Windows, Unix and OS X versions of the platform.

According to Adobe, the four flaws addressed in the patch could potentially allow a remote attacker to circumvent privacy controls on ColdFusion servers. In the most severe cases, an attacker would be able to assume total control over the targeted server.

Due to the nature of the vulnerabilities and because of reports that the flaws are being actively targeted in the wild, Adobe has given the patch its highest priority rating.

Adobe said that the top priority rating is usually reserved for serious flaws which are already or will likely soon be targeted in the wild.

Administrators can obtain the ColdFusion update from Adobe as a direct download. The company noted that ColdFusion 10 systems should have the "mandatory update" package installed before running the fix.

The release is the latest in what has been a busy week for security updates. Earlier this week Oracle issued a massive 86-patch security release, and the discovery of a new zero-day flaw in Java will likely necessitate another patch release in the coming days.

  • Comment  
  • Tweet  
  • Google plus  
  • Facebook  
  • LinkedIn  
  • Stumble Upon  
Shaun Nichols
About

Shaun Nichols is the US correspondent for V3.co.uk. He has been with the company since 2006, originally joining as a news intern at the site's San Francisco offices.

More on Security
What do you think?
blog comments powered by Disqus
Poll

IT curriculum poll

With coding now compulsory in schools, how important are digital skills for the next generation of school leavers?
66%
9%
17%
8%

Popular Threads

Powered by Disqus
V3 Security Summit

V3 Security Summit Day 2: Botnet, skills and BYOD intelligence incoming

Keep V3 bookmarked for news updates on all the key security concerns and topics facing businesses

Updating your subscription status Loading
Newsletters

Get the latest news (daily or weekly) direct to your inbox with V3 newsletters.

newsletter sign-up button
hpv3may

Getting started with virtualisation

Virtualisation can help you reduce costs, improve application availability, and simplify IT
management. However, getting started can be challenging

ibmv3may

Converting big data and analytics insights into results

Successful leaders are infusing analytics throughout their organisations to drive smarter decisions, enable faster actions and optimise outcomes

Mobile Games Developers X 5 £30-50K - HTML5, WebGL - Manchester

Mobile Games Developers X 5 £30-50K Objective C, C...

Senior Business Change Consultant

***SC CLEARED*** SENIOR BUSINESS CHANGE CONSULTANT...

PMO Lead (Planning)

PMO Lead (Planning) An excellent opportunity to work...

Virtualisation 3rd Line Support Engineer

Virtualisation (Vmware) 3rd Line Support Engineer - £35000...
To send to more than one email address, simply separate each address with a comma.