CVE-2001-0949

Published: Dec 4, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length.

Affected (11)

Products: Valicert: Enterprise Validation Authority

1 product

Enterprise Validation Authority

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Valicert Enterprise Validation Authority	Version 3.3
Valicert Enterprise Validation Authority	Version 3.4
Valicert Enterprise Validation Authority	Version 3.5
Valicert Enterprise Validation Authority	Version 3.6
Valicert Enterprise Validation Authority	Version 3.7
Valicert Enterprise Validation Authority	Version 3.8
Valicert Enterprise Validation Authority	Version 3.9
Valicert Enterprise Validation Authority	Version 4.0
Valicert Enterprise Validation Authority	Version 4.1
Valicert Enterprise Validation Authority	Version 4.2.1
Valicert Enterprise Validation Authority	Version 4.2

References (34)

http://marc.info/?l=bugtraq&m=100749428517090&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/3621

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/3622

Source: cve@mitre.org

http://www.securityfocus.com/bid/3624

Source: cve@mitre.org

http://www.securityfocus.com/bid/3625

Source: cve@mitre.org

http://www.securityfocus.com/bid/3627

Source: cve@mitre.org

http://www.securityfocus.com/bid/3628

Source: cve@mitre.org

http://www.securityfocus.com/bid/3629

Source: cve@mitre.org

http://www.securityfocus.com/bid/3630

Source: cve@mitre.org

http://www.securityfocus.com/bid/3631

Source: cve@mitre.org

http://www.securityfocus.com/bid/3632

Source: cve@mitre.org

http://www.securityfocus.com/bid/3633

Source: cve@mitre.org

http://www.securityfocus.com/bid/3634

Source: cve@mitre.org

http://www.securityfocus.com/bid/3635

Source: cve@mitre.org

http://www.securityfocus.com/bid/3636

Source: cve@mitre.org

http://www.valicert.com/support/security_advisory_eva.html

Source: cve@mitre.org

Vendor AdvisoryURL Repurposed

https://exchange.xforce.ibmcloud.com/vulnerabilities/7652

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=100749428517090&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3621

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/3622

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3624

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3625

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3627

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3628

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3629

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3630

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3631

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3632

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3633

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3634

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3635

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3636

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.valicert.com/support/security_advisory_eva.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor AdvisoryURL Repurposed

https://exchange.xforce.ibmcloud.com/vulnerabilities/7652

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.