Lucene search
HistoryFeb 06, 2009 - 7:30 p.m.
CVE-2002-2427
goahead webserver
authentication bypass
remote attackers
cve-2002-2427
nvd
6.7 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
53.8%
The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via “an extra slash in a URL,” a different vulnerability than CVE-2002-1603.
Related
cvelist
cvelist
cert
cert
GoAhead WebServer information disclosure and authentication bypass vulnerabilities
2009-02-05 00:00:00
GoAhead Web Server discloses source code of ASP files via crafted URL
2002-12-17 00:00:00
nessus
nessus
openvas
openvas
GoAhead WebServer Script Source Code Disclosure
2008-08-22 00:00:00
GoAhead WebServer Script Source Code Disclosure
2008-08-22 00:00:00
cve
cve
prion
prion
Design/Logic Flaw
2009-02-06 19:30:00
Default credentials
2008-03-04 19:44:00
6.7 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
53.8%
Related for CVE-2002-2427