NVD

Id
78386  
Name
CVE-2001-0949  
Description
Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2001-12-04  
Modified Date
2016-10-17  
Seq
2001-0949  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
392057 78386 CVE-2001-0949 20011204 NMRC Advisory - Multiple Valicert Problems  View
392058 78386 CVE-2001-0949 3621  View
392059 78386 CVE-2001-0949 3622  View
392060 78386 CVE-2001-0949 3624  View
392061 78386 CVE-2001-0949 3625  View
392062 78386 CVE-2001-0949 3627  View
392063 78386 CVE-2001-0949 3628  View
392064 78386 CVE-2001-0949 3629  View
392065 78386 CVE-2001-0949 3630  View
392066 78386 CVE-2001-0949 3631  View
392067 78386 CVE-2001-0949 3632  View
392068 78386 CVE-2001-0949 3633  View
392069 78386 CVE-2001-0949 3634  View
392070 78386 CVE-2001-0949 3635  View
392071 78386 CVE-2001-0949 3636  View
392072 78386 CVE-2001-0949 http://www.valicert.com/support/security_advisory_eva.html  View
392073 78386 CVE-2001-0949 eva-forms-bo(7652)  View

Related JVN