In conjunction with the ColdFusion 8 FCKEditor security issue mentioned last week, Adobe has just published a security bulletin entitled Hotfix available for potential ColdFusion 8 input sanitization issue. If you are using ColdFusion 8.x, you MUST read this bulletin.
This is in the cfusion8-err.log: "java.lang.NoClassDefFoundError: Dcoldfusion/fckupload=true".
Do you have any other details on this? Did you apply the hotfix jar as mentioned in the instructions?
–Dcoldfusion.fckupload=true is nothing but a system property passed to JVM like some of the others property that you may have in jvm.config. It should ideally not cause this esception.
Can you provide more details?
Can you mail me java.args line from jvm.config? Which OS are you using?
You can mail me on hkhandel {at} adobe.com
Thanks,
Hemant
Do not copy the java argument from the instructions. Type the argument instead in the jvm.config file and you should be all fine.
Any idea why this hotfix wasn't announced on this RSS feed:
http://rss.adobe.com/www/support/recent/recent_cf....
Do you happen to know if there's a more up to date feed I should be following for security announcements?
Many thanks.