CVE-2004-0407

2004-04-1704:00:00

mitre

www.cve.org

6.5 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.7%

JSON

The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.

References

marc.info/?l=bugtraq&m=108213782629001&w=2

secunia.com/advisories/11392

securitytracker.com/id?1009825

www.macromedia.com/devnet/security/security_zone/mpsb04-06.html

www.osvdb.org/5402

www.securityfocus.com/bid/10158

exchange.xforce.ibmcloud.com/vulnerabilities/15882