Valicert

Enterprise Validation Authority

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2001-0947

  • EPSS 0.9%
  • Veröffentlicht 04.12.2001 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.

7.5

CVE-2001-0948

  • EPSS 1.82%
  • Veröffentlicht 04.12.2001 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, ...

7.5

CVE-2001-0949

  • EPSS 5.68%
  • Veröffentlicht 04.12.2001 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File,...

7.5

CVE-2001-0950

Exploit
  • EPSS 1.63%
  • Veröffentlicht 04.12.2001 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead ...