CVE-2004-0407: Low severity Macromedia ColdFusion vulnerability

Published Apr 17, 2004

Updated

The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.

Affected Software

1 affected component

Macromedia ColdFusion=6.1

Remediation

Patch Available

http://www.macromedia.com/devnet/security/security_zone/mpsb04-06.html

Event History

Apr 17, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0407?

CVE-2004-0407 has a low severity rating primarily due to its denial of service nature affecting disk space.

How do I fix CVE-2004-0407?

To fix CVE-2004-0407, apply patches for ColdFusion MX 6.1 that address the file upload handling issues.

What does CVE-2004-0407 affect?

CVE-2004-0407 affects Macromedia ColdFusion version 6.1 specifically in its HTML form upload capability.

What is the impact of CVE-2004-0407?

The impact of CVE-2004-0407 is the potential for remote attackers to perform denial of service by consuming disk space.

Can CVE-2004-0407 be exploited remotely?

Yes, CVE-2004-0407 can be exploited remotely by attackers who repeatedly upload files and interrupt the uploads.