CVE-2001-0834
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c...
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.
Exploit likelihood
What each source reports
NVD Score used
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.
- Record
CVE-2001-0834- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:P - Updated
- 2026-11-02
CVE List No score
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.
- Record
CVE-2001-0834- Updated
- 2026-11-02
EUVDEUVD-2001-0817 No score
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.
- Record
EUVD-2001-0817- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v6hf-54vc-wr5c No score
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c...
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.
- Record
GHSA-v6hf-54vc-wr5c- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-0834 is a medium vulnerability (CVSS 6.4) in Htdig, published December 6, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.63%, the 85th percentile. No source names a fixed version.
References
debian.org/security/2001/dsa-080
calderasystems.com/support/security/advisories/CSSA-2001-035.0.txt
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000429
securityfocus.com/bid/3410
novell.com/linux/security/advisories/2001_035_htdig_txt.html
exchange.xforce.ibmcloud.com/vulnerabilities/7263
Show 7 moreShow less
marc.info?l=bugtraq&m=100260195401753&w=2
linux-mandrake.com/en/security/2001/MDKSA-2001-083.php3
sourceforge.net/tracker/index.php?func=detail&aid=458013&group_id=4593&atid=104593
redhat.com/support/errata/RHSA-2001-139.html
nvd.nist.gov/vuln/detail/CVE-2001-0834
github.com/advisories/GHSA-v6hf-54vc-wr5c