CVE-2001-0834: conectiva linux
Vulnerability summary
CVE-2001-0834 is a medium (CVSS 6.4) vulnerability in conectiva linux. EPSS estimates a 2.63% chance of exploitation in the next 30 days, higher than 85.3% of scored vulnerabilities.
Timeline
- 09-03-2002PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.63%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.63% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Conectiva1 product
- linux5.0 | 5.1 | 6.0 | 7.0
Debian1 product
- debian_linuxEOL2.2
Htdig1 product
- htdig≤ 3.1.5
Suse1 product
- suse_linux6.3 | 6.4 | 7.0 | 7.1 | 7.2 | 7.3
4 vendors · 4 products
References
11 links
- www.calderasystems.com/support/security/advisories/CSSA-2001-035.0.txtVendor AdvisoryX Refsource CALDERA