Lucene search

[email protected]CVE-2002-1951

HistoryJun 28, 2005 - 4:00 a.m.

CVE-2002-1951

2005-06-2804:00:00

[email protected]

web.nvd.nist.gov

cve-2002-1951

buffer overflow

goahead webserver 2.1

remote code execution

http get request

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.074 Low

EPSS

Percentile

94.1%

JSON

Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories.

Affected configurations

NVD

Node

goahead_softwaregoahead_webserverMatch2.1

CPENameOperatorVersion
goahead_software:goahead_webservergoahead software goahead webservereq2.1

CPE	Name	Operator	Version
goahead_software:goahead_webserver	goahead software goahead webserver	eq	2.1

References

freecode.com/projects/embedthis-goahead-webserver/releases/343539

osvdb.org/81099

www.iss.net/security_center/static/9884.php

www.securiteam.com/securitynews/5MP0C1580W.html

www.securityfocus.com/bid/5464

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.074 Low

EPSS

Percentile

94.1%

JSON

Related for CVE-2002-1951

cvelist1 nvd1