CVE-2004-0407 The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedl...
LowCVSS 2.6
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia coldfusion | = 6.1 | No fix listed |
References
- 20040416 [securityzone@macromedia.com: New Macromedia Security Zone Bulletin Posted] mailing-list
- 11392 third-party-advisory
- 1009825 vdb-entry
- www.macromedia.com patch vendor-advisory
- 5402 vdb-entry
- 10158 vdb-entry
- coldfusion-upload-file-dos(15882) vdb-entry