ColdFusion 7 Download Links Missing on Adobe Support

Hi,

Due to the lack of action / care by Adobe, I've had to find a way to mitigate this Cold Fusion security

issue (ie lack of the Cold Fusion Hotfix name: CVE-2009-1875).

Add the following to the Apache web server config:

<VirtualHost *:80>

     <Directory /var/www/html>

         AllowOverride AuthConfig Indexes Limit Options FileInfo

         RewriteEngine on

         RewriteCond %{REQUEST_URI}     %\d\d

         RewriteRule ^(.*)(%\d+)(.*)$   $1$3   

     </Directory>

</VirtualHost>

With this config in place, the following URL:

http://localhost/index%2500.cfm

Will redirect to:

http://localhost/index.cfm

Enjoy!