CVE-2001-0834

Published: Dec 6, 2001Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.

Affected (12)

Products: Conectiva: Linux · Htdig: Htdig · Debian: Debian Linux · +1 more

Show all products

Conectiva: Linux · Htdig: Htdig · Debian: Debian Linux · Suse: Suse Linux

1 product

1 product

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Conectiva Linux	Version 5.0
Conectiva Linux	Version 5.1
Conectiva Linux	Version 6.0
Conectiva Linux	Version 7.0
Htdig Htdig	Up to 3.1.5

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 2.2
Suse Suse Linux	Version 6.3
Suse Suse Linux	Version 6.4
Suse Suse Linux	Version 7.0
Suse Suse Linux	Version 7.1
Suse Suse Linux	Version 7.2
Suse Suse Linux	Version 7.3

References (22)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000429

Source: cve@mitre.org

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=100260195401753&w=2

Source: cve@mitre.org

http://sourceforge.net/tracker/index.php?func=detail&aid=458013&group_id=4593&atid=104593

Source: cve@mitre.org

http://www.calderasystems.com/support/security/advisories/CSSA-2001-035.0.txt

Source: cve@mitre.org

http://www.debian.org/security/2001/dsa-080

Source: cve@mitre.org

PatchVendor Advisory

http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-083.php3

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2001_035_htdig_txt.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2001-139.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/3410

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/7262

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/7263

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000429

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=100260195401753&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/tracker/index.php?func=detail&aid=458013&group_id=4593&atid=104593

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.calderasystems.com/support/security/advisories/CSSA-2001-035.0.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2001/dsa-080

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-083.php3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2001_035_htdig_txt.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2001-139.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3410

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/7262

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/7263

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.