CVE-2006-4725

Vulnerability

Adobe ColdFusion MX 7 and 7.01 contain a sandbox bypass vulnerability [1]. Local users can call ColdFusion Components (CFC) that reside within a sandbox from CFML templates located outside the sandbox. This bypasses the intended security restrictions that isolate sandboxed components.

Exploitation

An attacker with local user access to the ColdFusion server can create a CFML template outside the sandbox directory. By referencing a CFC inside the sandbox, the attacker can invoke its methods. No additional authentication or user interaction is required beyond having local access.

Impact

Successful exploitation allows the attacker to execute CFC methods that are supposed to be restricted to the sandbox. This can lead to unauthorized access to data, execution of privileged operations, or other actions depending on the functionality of the CFC.

Mitigation

The advisory [1] does not provide a specific fix. Users should upgrade to a version of ColdFusion that addresses this issue, if available. As of the publication date, no patch is mentioned. Restricting local user access may reduce risk.