CVE-2001-0947 | BDVDB-2026-3177 Detail

Description#

Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/7649
http://marc.info/?l=bugtraq&m=100749428517090&w=2
http://www.valicert.com/support/security_advisory_eva.html
http://www.securityfocus.com/bid/3615

Exploit#

No public exploit known

History#

Version 12002-02-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.