CVE-2001-0949

{"id": "CVE-2001-0949", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2001-12-04T05:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=100749428517090&w=2", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3621", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3622", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3624", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3625", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3627", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3628", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3629", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3630", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3631", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3632", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3633", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3634", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3635", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3636", "source": "cve@mitre.org"}, {"url": "http://www.valicert.com/support/security_advisory_eva.html", "tags": ["Vendor Advisory", "URL Repurposed"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7652", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length."}], "lastModified": "2024-02-14T01:17:43.863", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:valicert:enterprise_validation_authority:3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0325EEE5-AD5F-4262-A379-C6F4A8F6B4DD"}, {"criteria": "cpe:2.3:a:valicert:enterprise_validation_authority:3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC9EDA8D-1427-4FFB-B6E5-44296B945F1C"}, {"criteria": "cpe:2.3:a:valicert:enterprise_validation_authority:3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "847A5CCA-A8A1-4B07-B60F-69E0E56E9384"}, {"criteria": "cpe:2.3:a:valicert:enterprise_validation_authority:3.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27251C41-296E-4635-9727-37D661080994"}, {"criteria": "cpe:2.3:a:valicert:enterprise_validation_authority:3.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "474EF0B1-2D23-4149-A47B-F928DDB1F570"}, {"criteria": "cpe:2.3:a:valicert:enterprise_validation_authority:3.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1DA047B-69A6-41D2-B98E-9753813F325F"}, {"criteria": "cpe:2.3:a:valicert:enterprise_validation_authority:3.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DB971CB-596A-4A53-A801-6934A64010E8"}, {"criteria": "cpe:2.3:a:valicert:enterprise_validation_authority:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "473714FE-2743-4144-8A02-29E5981A26D0"}, {"criteria": "cpe:2.3:a:valicert:enterprise_validation_authority:4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E49EE460-3930-45ED-B5C3-E7C72CECE122"}, {"criteria": "cpe:2.3:a:valicert:enterprise_validation_authority:4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8147DB94-C5FA-45FA-A601-3FF4D2F6C93E"}, {"criteria": "cpe:2.3:a:valicert:enterprise_validation_authority:4.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2FBC1CB-22E4-4C67-9EE5-547EA6B1673E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}