Lucene search

[email protected]CVE-2002-0680

HistoryJul 23, 2002 - 4:00 a.m.

CVE-2002-0680

2002-07-2304:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2002-0680

directory traversal

goahead web server

web security

remote attack

vulnerability

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.019 Low

EPSS

Percentile

88.5%

JSON

Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a … (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.

CPENameOperatorVersion
goahead_software:goahead_webservergoahead software goahead webservereq2.1.1
goahead_software:goahead_webservergoahead software goahead webservereq2.1.5
goahead_software:goahead_webservergoahead software goahead webservereq2.1.2
goahead_software:goahead_webservergoahead software goahead webservereq2.1.4
orange_software:orange_web_serverorange software orange web servereq2.1
goahead_software:goahead_webservergoahead software goahead webservereq2.1.3
montavista_software:hard_hat_linuxmontavista software hard hat linuxeq1.0

CPE	Name	Operator	Version
goahead_software:goahead_webserver	goahead software goahead webserver	eq	2.1.1
goahead_software:goahead_webserver	goahead software goahead webserver	eq	2.1.5
goahead_software:goahead_webserver	goahead software goahead webserver	eq	2.1.2
goahead_software:goahead_webserver	goahead software goahead webserver	eq	2.1.4
orange_software:orange_web_server	orange software orange web server	eq	2.1
goahead_software:goahead_webserver	goahead software goahead webserver	eq	2.1.3
montavista_software:hard_hat_linux	montavista software hard hat linux	eq	1.0

References

archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.html

freecode.com/projects/embedthis-goahead-webserver/releases/343539

marc.info/?l=bugtraq&m=102631742711795&w=2

marc.info/?l=bugtraq&m=102709382714597&w=2

osvdb.org/81099

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.019 Low

EPSS

Percentile

88.5%

JSON

Related for CVE-2002-0680

cve1