Skip to main content
R
Rigel 7
Participating Frequently
October 6, 2009
Question

Security Patches for ColdFusion 6.1?

  • October 6, 2009
  • 1 reply
  • 888 views

Security Bulletin APSB09-12 describes several vulnerabilities affecting ColdFusion 8.0.1 "and below."  However, patches are only provided for ColdFusion 7.0.2 and above.  Is ColdFusion 6.1 affected by these vulnerabilities?  Should I apply the ColdFusion 7.0.2 patch to a ColdFusion 6.1 server?

The specific vulnerabilities I'm looking at are:  CVE-2009-1872, CVE-2009-1875, CVE-2009-1877, CVE-2009-1878.

Any help is greatly appreciated.

    This topic has been closed for replies.

    1 reply

    A
    Adam Cameron.
    Inspiring
    October 19, 2009

    I can't say whether the vulnerabilites would affect CFMX6, but I can say that CFMX6 isn't supported any more (http://www.adobe.com/support/programs/policies/supported.html).

    You definitely should not install patches not intended for your version of CF.  You really ought to upgrade to at least CFMX7; although if you're upgrading, you should go straight to CF8.  I don't recommend going to CF9 just yet: wait for a patch release of that first.

    --

    Adam

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices