CVE-2005-2306 Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication token to multiple sessions, which could allow authenticated us...
LowCVSS 3.7
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication token to multiple sessions, which could allow authenticated users to gain privileges as other users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia coldfusion | = 6.1 | No fix listed |
| macromedia coldfusion | = 7.0 | No fix listed |
| macromedia jrun | = 4.0 | No fix listed |
References
- 16081 patch third-party-advisory vendor-advisory
- 1014489 vdb-entry
- www.macromedia.com patch