Description
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.
References
- 10158 vdb-entry
- 1009825 vdb-entry
- 11392 third-party-advisory
- coldfusion-upload-file-dos(15882) vdb-entry
- 5402 vdb-entry
- 20040416 [securityzone@macromedia.com: New Macromedia Security Zone Bulletin Posted] mailing-list
- http://www.macromedia.com/devnet/security/security_zone/mpsb04-06.html