CVE-2005-2306 Information

Description

Race condition in Macromedia JRun 4.0 ColdFusion MX 6.1 and 7.0 when under heavy load causes JRun to assign a duplicate authentication token to multiple sessions which could allow authenticated users to gain privileges as other users.

Reference

http://secunia.com/advisories/16081 http://securitytracker.com/id?1014489 http://www.macromedia.com/devnet/security/security_zone/mpsb05-05.html