Goahead Software

Goahead Webserver

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2003-1568

  • EPSS 1.68%
  • Veröffentlicht 06.02.2009 19:30:00
  • Zuletzt bearbeitet 16.06.2026 22:04:40

GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl function.

5

CVE-2007-6702

  • EPSS 2.6%
  • Veröffentlicht 04.03.2008 19:44:00
  • Zuletzt bearbeitet 16.06.2026 22:48:36

goform/QuickStart_c0 on the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device contains a password in the typepassword field, which allows remote attackers to obtain this password by reading the HTML source, a different vulnerability than C...

7.5

CVE-2002-1951

Exploit
  • EPSS 5.83%
  • Veröffentlicht 31.12.2002 05:00:00
  • Zuletzt bearbeitet 16.06.2026 22:00:21

Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories.

5

CVE-2002-0680

  • EPSS 3.49%
  • Veröffentlicht 23.07.2002 04:00:00
  • Zuletzt bearbeitet 16.06.2026 21:57:55

Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has b...

7.5

CVE-2002-0681

Exploit
  • EPSS 8.34%
  • Veröffentlicht 23.07.2002 04:00:00
  • Zuletzt bearbeitet 16.06.2026 21:57:56

Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.

5

CVE-2002-1603

Exploit
  • EPSS 13.67%
  • Veröffentlicht 13.02.2002 05:00:00
  • Zuletzt bearbeitet 16.06.2026 21:59:38

GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.

5

CVE-2001-0385

Exploit
  • EPSS 8.39%
  • Veröffentlicht 02.07.2001 04:00:00
  • Zuletzt bearbeitet 16.06.2026 21:54:12

GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.

5

CVE-2001-0228

  • EPSS 3.56%
  • Veröffentlicht 03.05.2001 04:00:00
  • Zuletzt bearbeitet 16.06.2026 21:53:55

Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request.