NVD

Id
78277  
Name
CVE-2001-0834  
Description
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-05  
Published
2001-12-06  
Modified Date
2016-10-17  
Seq
2001-0834  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
391593 78277 CVE-2001-0834 CLA-2001:429  View
391594 78277 CVE-2001-0834 20011007 Re: Bug found in ht://Dig htsearch CGI  View
391595 78277 CVE-2001-0834 http://sourceforge.net/tracker/index.php?func=detail&aid=458013&group_id=4593&atid=104593  View
391596 78277 CVE-2001-0834 CSSA-2001-035.0  View
391597 78277 CVE-2001-0834 DSA-080  View
391598 78277 CVE-2001-0834 MDKSA-2001:083  View
391599 78277 CVE-2001-0834 SuSE-SA:2001:035  View
391600 78277 CVE-2001-0834 RHSA-2001:139  View
391601 78277 CVE-2001-0834 3410  View
391602 78277 CVE-2001-0834 htdig-htsearch-infinite-loop(7262)  View
391603 78277 CVE-2001-0834 htdig-htsearch-retrieve-files(7263)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64189 JVNDB-2001-000163 Red Hat Linux の htdig におけるサービス運用妨害 (DoS) の脆弱性 Red Hat Linux において、htdig を利用してドキュメント検索を行う際に、 -c というオプションをつけた場合に、任意のコンフィグファイルをターゲットホストに読み込ませる脆弱性が存在します。 CVE-2001-0834 3640 CVE-2001-0834 78277 6.4 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000163.html 2001-10-24 2007-04-01 View