Vulnerability CVE-2006-3979 - CERT Civis.Net

Vulnerability Name:

CVE-2006-3979 (CCN-28294)

Assigned:

2006-08-08

Published:

2006-08-08

Updated:

2017-07-20

Summary:

The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the ColdFusion Administrator.

CVSS v3 Severity:

3.9 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
5.3 Medium (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

3.2 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:P/I:P/A:N)
2.4 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:S/C:P/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2006-3979

Source: CCN
Type: SA21421
ColdFusion AdminAPI Authentication Bypass

Source: SECUNIA
Type: UNKNOWN
21421

Source: CCN
Type: SECTRACK ID: 1016660
Adobe ColdFusion Grants Users Access to AdminAPI

Source: SECTRACK
Type: UNKNOWN
1016660

Source: CCN
Type: ColdFusion TechNote 287ec799
ColdFusion MX 7: AdminAPI security update

Source: CCN
Type: Adobe Product Security Bulletin APSB06-10
ColdFusion AdminAPI Authentication Issue

Source: CONFIRM
Type: Patch
http://www.adobe.com/support/security/bulletins/apsb06-10.html

Source: CCN
Type: OSVDB ID: 27858
ColdFusion AdminAPI Programmatic Access Authentication Bypass

Source: BID
Type: UNKNOWN
19426

Source: CCN
Type: BID-19426
ColdFusion AdminAPI Authentication Bypass Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2006-3224

Source: XF
Type: UNKNOWN
coldfusion-adminapi-auth-bypass(28294)

Source: XF
Type: UNKNOWN
coldfusion-adminapi-auth-bypass(28294)

Vulnerable Configuration:

Configuration 1:

cpe:/a:macromedia:coldfusion:7.0:*:*:*:*:*:*:*

OR cpe:/a:macromedia:coldfusion:7.02:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:macromedia:coldfusion:7.0:*:*:*:*:*:*:*

OR cpe:/a:macromedia:coldfusion:7.02:*:*:*:*:*:*:*

AND

cpe:/o:sun:solaris:8::sparc:*:*:*:*:*

OR cpe:/o:microsoft:windows_2000_advanced_server:*:*:*:*:*:*:*:*

OR cpe:/o:ibm:aix:5.1:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_2000:::datacenter_server:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:::home:*:*:*:*:*

OR cpe:/o:microsoft:windows_xp:::professional:*:*:*:*:*

OR cpe:/o:sun:solaris:9::sparc:*:*:*:*:*

OR cpe:/o:microsoft:windows_2000:::professional:*:*:*:*:*

OR cpe:/a:ibm:aix_5l:-:*:*:*:*:*:*:*

OR cpe:/o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_2003_server:-::~~enterprise~~~:*:*:*:*:*

OR cpe:/o:microsoft:windows_2003_server:-::~~standard~~~:*:*:*:*:*

OR cpe:/o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::as:*:*:*:*:*

OR cpe:/o:ibm:aix:5.3:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

OR cpe:/o:sun:solaris:10::64bit:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*

OR cpe:/o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*

Denotes that component is vulnerable