There was an inaccuracy in the first advisory for the Macromedia product
versions affected.
The correct versions are:
Macromedia Coldfusion MX 6.0 (IIS ISAPI)
Macromedia JRun 3.0, 3.1 and 4.0 (IIS ISAPI)

You can always find the latest and most accurate versions of eEye advisories
at: http://www.eeye.com/html/Research/Advisories/index.html

Signed,
Marc Maiffret
Chief Hacking Officer
eEye Digital Security
T.949.349.9062
F.949.349.9538
http://eEye.com/Retina - Network Security Scanner
http://eEye.com/Iris - Network Traffic Analyzer
http://eEye.com/SecureIIS - Stop known and unknown IIS vulnerabilities

P.S. Go buy the Audioslave album.

[ reply ]