CVE-2001-0947

Published: Dec 4, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.

Affected (11)

Products: Valicert: Enterprise Validation Authority

Valicert

1 product

Enterprise Validation Authority

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Valicert Enterprise Validation Authority	Version 3.3
Valicert Enterprise Validation Authority	Version 3.4
Valicert Enterprise Validation Authority	Version 3.5
Valicert Enterprise Validation Authority	Version 3.6
Valicert Enterprise Validation Authority	Version 3.7
Valicert Enterprise Validation Authority	Version 3.8
Valicert Enterprise Validation Authority	Version 3.9
Valicert Enterprise Validation Authority	Version 4.0
Valicert Enterprise Validation Authority	Version 4.1
Valicert Enterprise Validation Authority	Version 4.2.1
Valicert Enterprise Validation Authority	Version 4.2