CVE-2001-0947

Опубликовано: 04 дек. 2001

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.

Ссылки

http://marc.info/?l=bugtraq&m=100749428517090&w=2
http://www.securityfocus.com/bid/3615
Patch
Vendor Advisory
http://www.valicert.com/support/security_advisory_eva.html
Vendor Advisory
URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/7649
http://marc.info/?l=bugtraq&m=100749428517090&w=2
http://www.securityfocus.com/bid/3615
Patch
Vendor Advisory
http://www.valicert.com/support/security_advisory_eva.html
Vendor Advisory
URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/7649

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:valicert:enterprise_validation_authority:3.3:*:*:*:*:*:*:*

cpe:2.3:a:valicert:enterprise_validation_authority:3.4:*:*:*:*:*:*:*

cpe:2.3:a:valicert:enterprise_validation_authority:3.5:*:*:*:*:*:*:*

cpe:2.3:a:valicert:enterprise_validation_authority:3.6:*:*:*:*:*:*:*

cpe:2.3:a:valicert:enterprise_validation_authority:3.7:*:*:*:*:*:*:*

cpe:2.3:a:valicert:enterprise_validation_authority:3.8:*:*:*:*:*:*:*

cpe:2.3:a:valicert:enterprise_validation_authority:3.9:*:*:*:*:*:*:*

cpe:2.3:a:valicert:enterprise_validation_authority:4.0:*:*:*:*:*:*:*

cpe:2.3:a:valicert:enterprise_validation_authority:4.1:*:*:*:*:*:*:*

cpe:2.3:a:valicert:enterprise_validation_authority:4.2:*:*:*:*:*:*:*

cpe:2.3:a:valicert:enterprise_validation_authority:4.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00901

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9jw8-93wq-x8c2

github

почти 4 года назад