=====================================================================
                                  CERT-Renater

                       Note d'Information No. 2005/VULN770
_____________________________________________________________________

DATE                      : 16/12/2005

HARDWARE PLATFORM(S)      : /

OPERATING SYSTEM(S)       : Systems running Flash Media Server,
                                 ColdFusion MX 6.X, JRun 4.0 server,
                                 ColdFusion MX 7.

======================================================================

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Adobe Security Bulletins:

- - Flash Media Server
- - ColdFusion MX 6.X
- - JRun 4.0 server
- - ColdFusion MX 7
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

MPSB05-11 – Administrator Interface Denial of Service
Vulnerability in Flash Media Server

Originally posted: December 15, 2005

Summary:
This bulletin addresses a publicly reported security issue
with Flash Media Server.

Affected Software Versions:
* Flash Media Server 2.0
* Flash Media Server 1.5

Severity Rating:
Adobe categorizes this issue as important and recommends
users apply this workaround to their installations:
http://www.macromedia.com/go/mpsb05-11

Learn more:
http://www.macromedia.com/go/mpsb05-11

~~~~~~~

MPSB05-12 Sandbox Security and CFMAIL Vulnerability in
ColdFusion MX 6.X

Originally posted: December 15, 2005

Summary:
This bulletin addresses two (2) privately reported security
issues with ColdFusion 6.X.

Affected Software Versions:
ColdFusion MX 6.0
ColdFusion MX 6.1
ColdFusion MX 6.1 with JRun

Severity Rating:
Adobe categorizes this issue as a important issue and
recommends users patch their installations.

Learn more:
http://www.macromedia.com/go/mpsb05-12

~~~~~~~

MPSB05-13 Cumulative Security Updater for JRun 4.0
server

Originally posted: December 15, 2005

Summary:
This is a cumulative security updater for JRun server
that includes all previously released patches for 4.0.

Affected Software Versions:
JRun 4.0 (all editions)

Severity Rating:
Adobe categorizes this issue as a important issue
and recommends users patch their installations.

Learn more:
http://www.macromedia.com/go/mpsb05-13

~~~~~~~

MPSB05-14 Cumulative Security Updater for ColdFusion MX 7

Originally posted: December 15, 2005

Summary:
This is a cumulative security updater for ColdFusion MX 7
server that includes all previously released patches.

Affected Software Versions:
ColdFusion MX 7.0

Severity Rating:
Adobe categorizes this issue as a important issue and
recommends users patch their installations.

Learn more:
http://www.macromedia.com/go/mpsb05-14


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ANY INFORMATION, PATCHES, DOWNLOADS, WORKAROUNDS, OR FIXES
PROVIDED BY ADOBE IN THIS BULLETIN ARE PROVIDED "AS IS"
WITHOUT WARRANTY OF ANY KIND. ADOBE AND ITS SUPPLIERS
DISCLAIM ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED OR
OTHERWISE, INCLUDING THE WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. ALSO, THERE IS NO
WARRANTY OF NON-INFRINGEMENT, TITLE, OR QUIET ENJOYMENT.
(USA ONLY) SOME STATES DO NOT ALLOW THE EXCLUSION OF
IMPLIED WARRANTIES, SO THE ABOVE EXCLUSION MAY NOT APPLY
TO YOU. IN NO EVENT SHALL ADOBE, INC. OR ITS SUPPLIERS BE
LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING, WITHOUT
LIMITATION, DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL,
SPECIAL, PUNITIVE, COVER, LOSS OF PROFITS, BUSINESS
INTERRUPTION, OR THE LIKE, OR LOSS OF BUSINESS DAMAGES,
BASED ON ANY THEORY OF LIABILITY INCLUDING BREACH OF
CONTRACT, BREACH OF WARRANTY, TORT (INCLUDING NEGLIGENCE),
PRODUCT LIABILITY OR OTHERWISE, EVEN IF ADOBE, INC. OR ITS
SUPPLIERS OR THEIR REPRESENTATIVES HAVE BEEN ADVISED OF
THE POSSIBILITY OF SUCH DAMAGES. (USA ONLY) SOME STATES
DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR
CONSEQUENTIAL OR INCIDENTAL DAMAGES, SO THE ABOVE EXCLUSION
OR LIMITATION MAY NOT APPLY TO YOU AND YOU MAY ALSO HAVE
OTHER LEGAL RIGHTS THAT VARY FROM STATE TO STATE.

Adobe reserves the right, from time to time, to update
the information in this document with current information.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This is a security message from Adobe Systems Incorporated,
its subsidiaries and affiliates (“Adobe”), 345 Park Avenue,
San Jose, CA  95110 USA. If you would prefer not to receive
e-mail like this from Adobe in the future, please respond
to this email and include “Unsubscribe” in the subject line
or send an e-mail to:
direct@adobesystems-macromedia.com

Your privacy is important to us. Please review Adobe's online
Privacy Policy by clicking here:
http://www.adobe.com/misc/privacy.html

======================================================================

         =========================================================
         Les serveurs de référence du CERT-Renater
         http://www.urec.fr/securite
         http://www.cru.fr/securite
         http://www.renater.fr
         =========================================================
         + CERT-RENATER          | tel : 01-53-94-20-44          +
         + 151 bd de l'Hopital   | fax : 01-53-94-20-41          +
         + 75013 Paris           | email: certsvp@renater.fr     +
         =========================================================