AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2001-0834

MEDIUM · CVSS 6.4 EPSS 2.63%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2001-12-06 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2001-0834
Severity
MEDIUM
CVSS
6.4
EPSS
2.63%

Original Filing — NVD Description

htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.