Read the docs
TI-2001-00906 Aliases CVE-2001-0949GHSA-4pfw-pf6q-r4x8

Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority…

Priority MEDIUM 40Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length.

Why it matters now

EPSS 0.04063 90th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:valicert:enterprise_validation_authority:3.3:*:*:*:*:*:*:*3.3VulnerableValicert
cpe:2.3:a:valicert:enterprise_validation_authority:3.4:*:*:*:*:*:*:*3.4VulnerableValicert
cpe:2.3:a:valicert:enterprise_validation_authority:3.5:*:*:*:*:*:*:*3.5VulnerableValicert
cpe:2.3:a:valicert:enterprise_validation_authority:3.6:*:*:*:*:*:*:*3.6VulnerableValicert
cpe:2.3:a:valicert:enterprise_validation_authority:3.7:*:*:*:*:*:*:*3.7VulnerableValicert
cpe:2.3:a:valicert:enterprise_validation_authority:3.8:*:*:*:*:*:*:*3.8VulnerableValicert
cpe:2.3:a:valicert:enterprise_validation_authority:3.9:*:*:*:*:*:*:*3.9VulnerableValicert
cpe:2.3:a:valicert:enterprise_validation_authority:4.0:*:*:*:*:*:*:*4.0VulnerableValicert
cpe:2.3:a:valicert:enterprise_validation_authority:4.1:*:*:*:*:*:*:*4.1VulnerableValicert
cpe:2.3:a:valicert:enterprise_validation_authority:4.2:*:*:*:*:*:*:*4.2VulnerableValicert
  • cpe:2.3:a:valicert:enterprise_validation_authority:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Valicert
  • cpe:2.3:a:valicert:enterprise_validation_authority:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Valicert
  • cpe:2.3:a:valicert:enterprise_validation_authority:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·Valicert
  • cpe:2.3:a:valicert:enterprise_validation_authority:3.6:*:*:*:*:*:*:* Versions 3.6 Vulnerable ·Valicert
  • cpe:2.3:a:valicert:enterprise_validation_authority:3.7:*:*:*:*:*:*:* Versions 3.7 Vulnerable ·Valicert
  • cpe:2.3:a:valicert:enterprise_validation_authority:3.8:*:*:*:*:*:*:* Versions 3.8 Vulnerable ·Valicert
  • cpe:2.3:a:valicert:enterprise_validation_authority:3.9:*:*:*:*:*:*:* Versions 3.9 Vulnerable ·Valicert
  • cpe:2.3:a:valicert:enterprise_validation_authority:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Valicert
  • cpe:2.3:a:valicert:enterprise_validation_authority:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Valicert
  • cpe:2.3:a:valicert:enterprise_validation_authority:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·Valicert
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:valicert:enterprise_validation_authority:4.2.1:*:*:*:*:*:*:*4.2.1VulnerableValicert
  • cpe:2.3:a:valicert:enterprise_validation_authority:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·Valicert

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2001-0949
  2. 2026-10-03 Alias added: GHSA-4pfw-pf6q-r4x8

References

Advisory 1

Other 1

  • TI-2001-00904 Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1… CVSS 2.0HIGH 7.5
  • TI-2001-00905 Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority… CVSS 2.0HIGH 7.5
  • TI-2001-00907 ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1… CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences