CVE-2001-0834
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.6%
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.
Produtos afetados
n/a · n/aReferências
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000429http://marc.info/?l=bugtraq&m=100260195401753&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/7262https://exchange.xforce.ibmcloud.com/vulnerabilities/7263http://sourceforge.net/tracker/index.php?func=detail&aid=458013&group_id=4593&atid=104593http://www.calderasystems.com/support/security/advisories/CSSA-2001-035.0.txthttp://www.debian.org/security/2001/dsa-080http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-083.php3http://www.novell.com/linux/security/advisories/2001_035_htdig_txt.htmlhttp://www.redhat.com/support/errata/RHSA-2001-139.htmlhttp://www.securityfocus.com/bid/3410