CVE-2001-0947

EPSS 2.45%
Veröffentlicht 04.12.2001 05:00:00
Zuletzt bearbeitet 16.06.2026 21:55:16
Erkennungen
Login

Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

NVD 11 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Valicert ≫ Enterprise Validation Authority Version 3.3

Valicert ≫ Enterprise Validation Authority Version 3.4

Valicert ≫ Enterprise Validation Authority Version 3.5

Valicert ≫ Enterprise Validation Authority Version 3.6

Valicert ≫ Enterprise Validation Authority Version 3.7

Valicert ≫ Enterprise Validation Authority Version 3.8

Valicert ≫ Enterprise Validation Authority Version 3.9

Valicert ≫ Enterprise Validation Authority Version 4.0

Valicert ≫ Enterprise Validation Authority Version 4.1

Valicert ≫ Enterprise Validation Authority Version 4.2

Valicert ≫ Enterprise Validation Authority Version 4.2.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.45%	0.823

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://marc.info/?l=bugtraq&m=100749428517090&w=2

http://www.securityfocus.com/bid/3615

Patch

Vendor Advisory

http://www.valicert.com/support/security_advisory_eva.html

Vendor Advisory

URL Repurposed

https://exchange.xforce.ibmcloud.com/vulnerabilities/7649

https://nvd.nist.gov/vuln/detail/CVE-2001-0947

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2001-0947

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2001-0947

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2001-0947