← Database

CVE-2001-0947

HIGH CVSS: 7.5 Published: 2001-12-04 Modified: 2026-06-16

Description

Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.

Affected Platforms

Valicert Enterprise Validation Authority

Weakness Type

NVD-CWE-Other

References