CVE

Id
3640  
CVE No.
CVE-2001-0834  
Status
Entry  
Description
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
16130 3640 CVE-2001-0834 MISC:http://sourceforge.net/tracker/index.php?func=detail&aid=458013&group_id=4593&atid=104593  View
16131 3640 CVE-2001-0834 BUGTRAQ:20011007 Re: Bug found in ht://Dig htsearch CGI  View
16132 3640 CVE-2001-0834 URL:http://marc.info/?l=bugtraq&m=100260195401753&w=2  View
16133 3640 CVE-2001-0834 CONECTIVA:CLA-2001:429  View
16134 3640 CVE-2001-0834 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000429  View
16135 3640 CVE-2001-0834 SUSE:SuSE-SA:2001:035  View
16136 3640 CVE-2001-0834 URL:http://www.novell.com/linux/security/advisories/2001_035_htdig_txt.html  View
16137 3640 CVE-2001-0834 DEBIAN:DSA-080  View
16138 3640 CVE-2001-0834 URL:http://www.debian.org/security/2001/dsa-080  View
16139 3640 CVE-2001-0834 REDHAT:RHSA-2001:139  View
16140 3640 CVE-2001-0834 URL:http://www.redhat.com/support/errata/RHSA-2001-139.html  View
16141 3640 CVE-2001-0834 CALDERA:CSSA-2001-035.0  View
16142 3640 CVE-2001-0834 URL:http://www.calderasystems.com/support/security/advisories/CSSA-2001-035.0.txt  View
16143 3640 CVE-2001-0834 MANDRAKE:MDKSA-2001:083  View
16144 3640 CVE-2001-0834 URL:http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-083.php3  View
16145 3640 CVE-2001-0834 BID:3410  View
16146 3640 CVE-2001-0834 URL:http://www.securityfocus.com/bid/3410  View
16147 3640 CVE-2001-0834 XF:htdig-htsearch-infinite-loop(7262)  View
16148 3640 CVE-2001-0834 URL:http://xforce.iss.net/static/7262.php  View
16149 3640 CVE-2001-0834 XF:htdig-htsearch-retrieve-files(7263)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64189 JVNDB-2001-000163 Red Hat Linux の htdig におけるサービス運用妨害 (DoS) の脆弱性 Red Hat Linux において、htdig を利用してドキュメント検索を行う際に、 -c というオプションをつけた場合に、任意のコンフィグファイルをターゲットホストに読み込ませる脆弱性が存在します。 CVE-2001-0834 3640 6.4 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000163.html  View