CVE-2004-0407
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is...
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.
Exploit likelihood
What each source reports
NVD Score used
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.
- Record
CVE-2004-0407- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.
- Record
CVE-2004-0407- Updated
- 2026-11-02
EUVDEUVD-2004-0407 No score
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.
- Record
EUVD-2004-0407- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-85m2-347j-wh42 No score
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is...
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.
- Record
GHSA-85m2-347j-wh42- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0407 is a low vulnerability (CVSS 2.6) in Macromedia Coldfusion, published April 17, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.53%, the 74th percentile. No source names a fixed version.
References
securityfocus.com/bid/10158
securitytracker.com/id?1009825
secunia.com/advisories/11392
exchange.xforce.ibmcloud.com/vulnerabilities/15882
osvdb.org/5402
marc.info?l=bugtraq&m=108213782629001&w=2
macromedia.com/devnet/security/security_zone/mpsb04-06.html
nvd.nist.gov/vuln/detail/CVE-2004-0407
github.com/advisories/GHSA-85m2-347j-wh42