Adobe
Sign in Privacy My Adobe

ColdFusion: Security Bulletin APSB10-05

Adobe Community Help


Products Affected

Contact support

Issue

Note:This Technote description was updated on 02/18/2010. All ColdFusion users need to review this Technote again.

ColdFusion 9.0, 8.0.x and 7.0.2 are affected by the issue mentioned in security bulletin APSB10-05. This Technote provides fixes for the security issue as well as installation instructions.  

Solution

Follow the instructions below to apply the fix to the different versions of ColdFusion.

Definition of ColdFusion-Lib

Server Install - {ColdFusion-Home}/lib

Multiserver - {JRun-Home}/servers/{YourServer}/cfusion-ear/cfusion-war/WEB-INF/cfusion/lib

J2EE Installs- cfusion-ear/cfusion-war/WEB-INF/cfusion/lib

ColdFusion 9

  1. Download the hotfix and extract the files.
  2. Stop the ColdFusion instance.
  3. Go to the {ColdFusion-Lib} directory and back up the flex-messaging-core.jar and flex-messaging-common.jar files.
  4. Copy the extracted files flex-messaging-core.jar and flex-messaging-common.jar to the {ColdFusion-Lib} directory.
  5. Restart the ColdFusion instance.
  6.  Repeat Steps 2 – 5 if there are multiple instances of ColdFusion.

ColdFusion 8 and 8.0.1

  1. Download the hotfix and extract the files.
  2. Stop the ColdFusion instance.
  3. Go to the {ColdFusion-Lib} directory and back up the flex-messaging.jar and flex-messaging-common.jar files.
  4. Copy the extracted files flex-messaging.jar and flex-messaging-common.jar to the {ColdFusion-Lib} directory.
  5. Restart the ColdFusion instance.
  6. Repeat Steps 2 – 5 if there are multiple instances of ColdFusion.

ColdFusion 7.0.2

Note: Hotfix jar updated on 02/18/2010

  1. Download the hotfix and extract the files.
  2. Stop the ColdFusion instance.
  3. Go to the {ColdFusion-Lib} directory and back up the flex-messaging.jar and flex-messaging-common.jar files. 
  4. Copy the extracted files flex-messaging.jar and flex-messaging-common.jar to the {ColdFusion-Lib} directory.
  5. Restart the ColdFusion instance.
  6. Repeat Steps 2 – 5 if there are multiple instances of ColdFusion.

 

 

 

 

 

 

 

 

Keywords: cpsid_82241

This work is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License  Twitter™ and Facebook posts are not covered under the terms of Creative Commons.

Legal Notices   |   Online Privacy Policy

Products

Download

Support & Learning

Buy

Company

Choose your region

Copyright © 2013 Adobe Systems Incorporated. All rights reserved.

Terms of Use | Privacy | Cookies

Reviewed by TRUSTe: site privacy statement