CVEvulnerability

CVE-2001-0947

7.5 HIGH Published 2001-12-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-12-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.

Affected configurations

• valicert enterprise validation authority 3.3 • valicert enterprise validation authority 3.4 • valicert enterprise validation authority 3.5 • valicert enterprise validation authority 3.6 • valicert enterprise validation authority 3.7 • valicert enterprise validation authority 3.8 • valicert enterprise validation authority 3.9 • valicert enterprise validation authority 4.0 • valicert enterprise validation authority 4.1 • valicert enterprise validation authority 4.2 • valicert enterprise validation authority 4.2.1

References