CVE-2001-0950

7.5 highEPSS 1.6%

High (7.5) in valicert enterprise validation authority. EPSS 1.6% chance of exploitation in the next 30 days.

ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool is low, which could make it easier for local or remote attackers to steal tokens or certificates via brute force guessing.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-331
Published: 2001-12-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

valicert:enterprise_validation_authority

References

http://marc.info/?l=bugtraq&m=100749428517090&w=2
http://www.securityfocus.com/bid/3618
http://www.securityfocus.com/bid/3620
http://www.valicert.com/support/security_advisory_eva.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/7651

Check your stack JSON