"From LOW to PWNED [2] ColdFusion"

Oh ok I didn't see that they actually changed CF8's CHF (cumulative hot fix) 4 to include the fix. Does that mean many people may need to reapply that hotfix? And CF9, same for CHF 2 I think. nathan strutz [www.dopefly.com] [hi.im/nathanstrutz] [about.me/nathanstrutz] > > http://www.adobe.com/support/coldfusion/downloads_updates.html > > > > > > > Where precisely is the download for the fix to this vulnerability? > > > > nathan strutz > > [www.dopefly.com] [hi.im/nathanstrutz] [about.me/nathanstrutz] > > > > > > > > > > > > > > "no patches exist for 6 & 7 so if you see CF6 or CF7 its always vuln to > > the > > > bug" > > > > > > > > > > > > http://carnal0wnage.attackresearch.com/2012/04/from-low-to-pwned-2-coldfusion.html > > > > > > > > > -- > > > John Bliss - http://about.me/jbliss > > > > > > > > > > > > > > >