CVE-2001-0949

Publicada em 02 fev 2002 · Atualizada em 08 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 4.1%

Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length.

Produtos afetados

n/a · n/a

Referências

http://marc.info/?l=bugtraq&m=100749428517090&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/7652 http://www.securityfocus.com/bid/3621 http://www.securityfocus.com/bid/3622 http://www.securityfocus.com/bid/3624 http://www.securityfocus.com/bid/3625 http://www.securityfocus.com/bid/3627 http://www.securityfocus.com/bid/3628 http://www.securityfocus.com/bid/3629 http://www.securityfocus.com/bid/3630 http://www.securityfocus.com/bid/3631 http://www.securityfocus.com/bid/3632