# CVE-2001-0949

## Summary

- **CVE ID:** CVE-2001-0949
- **Severity:** UNKNOWN
- **CVSS Score:** 0.28
- **CWE:** N/A
- **Published:** Feb 2, 2002
- **Last Modified:** Mar 16, 2026

## Description

Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](http://www.securityfocus.com/bid/3634)
- [CNA](http://www.securityfocus.com/bid/3631)
- [CNA](http://www.securityfocus.com/bid/3635)
- [CNA](http://www.securityfocus.com/bid/3628)
- [CNA](http://www.securityfocus.com/bid/3625)
- [CNA](http://www.securityfocus.com/bid/3636)
- [CNA](http://marc.info/?l=bugtraq&m=100749428517090&w=2)
- [CNA](http://www.securityfocus.com/bid/3633)
- [CNA](http://www.securityfocus.com/bid/3630)
- [CNA](http://www.valicert.com/support/security_advisory_eva.html)
- [CNA](http://www.securityfocus.com/bid/3629)
- [CNA](http://www.securityfocus.com/bid/3621)
- [CNA](http://www.securityfocus.com/bid/3622)
- [CNA](http://www.securityfocus.com/bid/3627)
- [CNA](http://www.securityfocus.com/bid/3632)
- [CNA](http://www.securityfocus.com/bid/3624)
- [CNA](https://exchange.xforce.ibmcloud.com/vulnerabilities/7652)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 5.68%
- **EPSS Percentile:** 90.2

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-19._