CVE-2004-0407

LowCVSS 2.6/10Last modified Jun 16, 2026

Description

The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.

Metrics

CVSS 2.0 2.6/10AV:N/AC:H/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published: Jun 1, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-04087.5Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code.CVE-2004-04097.5Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to ex CVE-2004-04117.5The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlo CVE-2004-04125.0Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.CVE-2004-041310.0libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allow CVE-2004-041410.0CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator fr CVE-2004-04152.1Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.CVE-2004-041610.0Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attacker CVE-2004-04175.0Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may CVE-2004-041810.0serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote att CVE-2004-04197.5XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the CVE-2004-042010.0The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote att