CVE-2003-1568

GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an invalid URL, related to the websSafeUrl function...

CVE-2003-1569

GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service daemon crash via an HTTP request with a 1 con, 2 nul, 3 clock$, or 4 config$ device name in a path component, different vectors than CVE-2001-0385...

CVE-2002-2427

CVE-2002-2427 affects GoAhead WebServer prior to 2.1.1, where the security handler could be bypassed to access protected web content via an extra slash in the URL. The issue is documented as a separate vulnerability from CVE-2002-1603. Public records in NVD indicate a base score of 5.0 (Medium) w...

CVE-2003-1568

GoAhead WebServer (pre-2.1.6) is affected by a denial of service via a NULL pointer dereference in websSafeUrl triggered by an invalid URL, causing daemon crash. This vulnerability is documented across multiple sources (including NVD/RH-CVE) with the same root cause. Remediation guidance points t...

CVE-2002-2431

GoAhead WebServer before 2.1.4 is affected by a vulnerability in sockGen.c caused by incorrect use of socketInputBuffered, allowing remote attackers to trigger incorrect behavior via malicious code. The issue is documented across multiple feeds (NVD/Red Hat/CVE records) and is addressed in the Go...

CVE-2002-2431

Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c...

CVE-2003-1568

GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an invalid URL, related to the websSafeUrl function...

CVE-2003-1569

GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service daemon crash via an HTTP request with a 1 con, 2 nul, 3 clock$, or 4 config$ device name in a path component, different vectors than CVE-2001-0385...

CVE-2002-2428

CVE-2002-2428 affects the GoAhead WebServer (webs.c) prior to version 2.1.4. A remote attacker can trigger a NULL pointer dereference and daemon crash by sending an HTTP POST with a Content-Length header but no body data, resulting in a denial of service. Affected product: GoAhead WebServer; vuln...

CVE-2002-2430

GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service CPU consumption by performing a socket disconnect to terminate a request before it has been fully processed by the server...

CVE-2002-2430

CVE-2002-2430 affects GoAhead WebServer prior to version 2.1.1. The vulnerability is a denial of service caused by remote-triggered socket disconnects that terminate a request before it has been fully processed, leading to increased CPU usage. The available documents identify the affected product...

CVE-2003-1569

CVE-2003-1569 affects GoAhead WebServer prior to 2.1.5 on Windows 95/98/ME. A remote attacker can crash the daemon by sending an HTTP request that includes a path component with a device name (con, nul, clock$, or config$), producing a denial of service. This differs from CVE-2001-0385 in vector ...

CVE-2002-2429

The vulnerability affects GoAhead WebServer, specifically the webs.c component, in versions before 2.1.4. A remote attacker can crash the daemon by sending an HTTP POST with a negative integer in the Content-Length header, leading to a denial of service. The issue is documented across multiple so...

CVE-2002-2428

webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an HTTP POST request that contains a Content-Length header but no body data...

GoAhead WebServer information disclosure and authentication bypass vulnerabilities

Overview GoAhead WebServer contains vulnerabilities that may allow an attacker to view source files containing sensitive information or bypass authentication. The information disclosure vulnerability was previously published as VU975041. Description GoAhead WebServer contains vulnerabilities...

GoAhead WebServer Script Source Code Disclosure

A vulnerable version of GoAhead Webserver is running on the remote host. Description : GoAhead Webserver is installed on the remote system. It's an open-source webserver, which is capable of hosting ASP pages, and installation on multiple operating systems. The version installed is vulnerable to...

CVE-2007-6702

goform/QuickStartc0 on the GoAhead Web Server on the FS4104-AW aka rooter VDSL device contains a password in the typepassword field, which allows remote attackers to obtain this password by reading the HTML source, a different vulnerability than CVE-2002-1603...

Default credentials

goform/QuickStartc0 on the GoAhead Web Server on the FS4104-AW aka rooter VDSL device contains a password in the typepassword field, which allows remote attackers to obtain this password by reading the HTML source, a different vulnerability than CVE-2002-1603...

CVE-2007-6702

goform/QuickStartc0 on the GoAhead Web Server on the FS4104-AW aka rooter VDSL device contains a password in the typepassword field, which allows remote attackers to obtain this password by reading the HTML source, a different vulnerability than CVE-2002-1603...

CVE-2007-6702

goform/QuickStartc0 on the GoAhead Web Server on the FS4104-AW aka rooter VDSL device contains a password in the typepassword field, which allows remote attackers to obtain this password by reading the HTML source, a different vulnerability than CVE-2002-1603...