Skip to main content
Participant
April 29, 2014
Question

Are Linux servers also vullnerable to apsb 11-14?

  • April 29, 2014
  • 1 reply
  • 719 views

Are Linux servers also vulnerable to apsb 11-14?  Only Windows, Mac's, and UNIX systems are listed in the alert.  We are running CF 9.0

This topic has been closed for replies.

1 reply

pete_freitag
Participating Frequently
April 29, 2014

Yes linux servers also need to apply that patch. When they say UNIX, they are including: Linux, Solaris, AIX

Participating Frequently
April 29, 2014

We are running CF 9 on Linux. To remediate vulnerability (APSB11-14), we were given below link for fix:

http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix-apsb11-14.html

We followed the steps and finally when we started CF Admin, it was throwing error. It was looking for path in as in Windows like

'C:/{ColdFusionHome}/wwwroot ..........now the question is if the CFIDE or CF9 provided on this link also applicable for Linux too?If so, do we need to do any customization?

Moreover if you look at step 9 for this:

Go to {ColdFusion-Home}/wwwroot/WEB-INF directory and make a backup of WEB-INF folder.

above path is using wwwroot which I guess comes in Windows.

If somebody knows a separate link for APSB11-14 for Linux or can guide us if we are missing something on above link, please let me know.

Thanks

pete_freitag
Participating Frequently
April 29, 2014

On linux {ColdFusion-Home} would be /opt/coldfusion9 or something like that by default. It still does have the wwwroot folder, you can find WEB-INF by running: find /opt | fgrep WEB-INF