CVE-2007-6702

CVE-2007-6702 affects the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device. The vulnerability exposes a password embedded in the typepassword field, which can be read from the HTML source by remote attackers, enabling password disclosure. The CVSS2 base score is 5.0 (MEDIUM) with netw...

rooter VDSL Device (Goahead WEBSERVER) Disclosure Vulnerability

No description provided by source. -------------------------------------------------------------------------------- WebServer powered by goahead WEBSERVER Vulnerability on : FS4104-AW - Full-Service VDSL Device exemple : IP : 81.240.1.1 to 81.240.1.254 / port : 80 exploit :...

rooter VDSL Device (Goahead WEBSERVER) Disclosure Vulnerability

Exploit for hardware platform in category remote exploits =============================================================== rooter VDSL Device Goahead WEBSERVER Disclosure Vulnerability ===============================================================...

FS4104-AW VDSL Device (Rooter) - GoAhead WebServer Disclosure

FS4104-AW VDSL Device Rooter - GoAhead WebServer Disclosure -------------------------------------------------------------------------------- WebServer powered by goahead WEBSERVER Vulnerability on : FS4104-AW - Full-Service VDSL Device exemple : IP : 81.240.1.1 to 81.240.1.254 / port : 80 exploit...

FS4104-AW VDSL Device (Rooter) - GoAhead WebServer Disclosure

-------------------------------------------------------------------------------- WebServer powered by goahead WEBSERVER Vulnerability on : FS4104-AW - Full-Service VDSL Device exemple : IP : 81.240.1.1 to 81.240.1.254 / port : 80 exploit : =http://ip/goform/QuickStartc0 =source =password disclosu...

CVE-2002-1951

CVE-2002-1951 describes a buffer overflow in GoAhead WebServer 2.1 . An attacker can trigger the overflow by sending a long HTTP GET request with a large number of subdirectories, potentially enabling remote code execution. The available documents do not provide specific details on the vulnerable...

CVE-2002-1951

Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories...

CVE-2002-1603

GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, , %2f encoded /, %20 encoded space, or %00 encoded null character, which returns the ASP source code unparsed...

CVE-2002-1603

CVE-2002-1603 affects GoAhead Web Server 2.1.7 and earlier: an attacker can obtain ASP source code by requesting a URL terminated with /, , %2f, %20, or %00, causing the ASP file to be returned unparsed. The issue is a data disclosure due to how the server handles certain URL terminations. The vu...

goahead2.txt

Luigi Auriemma Application: Goahead webserver http://www.goahead.com/webserver/webserver.htm Versions: = 2.1.8 Platforms: multiplatform Bug: bypassing of special directories management with the effect of downloading cgi-bin files and more Risk: medium/high Exploitation: remote with browser Date: ...

Resources consumption in Goahead webserver <= 2.1.8

Luigi Auriemma Application: Goahead webserver http://www.goahead.com/webserver/webserver.htm Versions: = 2.1.8 Platforms: multiplatform Bug: resources consumption Risk: medium/high Exploitation: remote Date: 19 Jan 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

Directories management bypassing in Goahead webserver <= 2.1.8

Luigi Auriemma Application: Goahead webserver http://www.goahead.com/webserver/webserver.htm Versions: = 2.1.8 Platforms: multiplatform Bug: bypassing of special directories management with the effect of downloading cgi-bin files and more Risk: medium/high Exploitation: remote with browser Date: ...

GoAhead script source leak

It's possible to obtain content of .asp or cgi-bin file by adding special characters to filename...

goahead.txt

Luigi Auriemma Application: Goahead webserver http://www.goahead.com/webserver/webserver.htm Versions: = 2.1.8 Platforms: multiplatform Bug: resources consumption Risk: medium/high Exploitation: remote Date: 19 Jan 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

GoAhead Web Server 2.1.x - Directory Management Policy Bypass

source: https://www.securityfocus.com/bid/9450/info GoAhead WebServer is prone to a vulnerability that may permit remote attackers to bypass directory management policy. It is reported that certain syntax may be used in HTTP GET requests to bypass the policy for how certain request should be...

Server side scripts viewing in Goahead webserver <= 2.1.7

Luigi Auriemma Application: Goahead webserver http://12.129.4.11/webserver/webserver.htm Versions: = 2.1.7 Platforms: multiplatform Bug: source code viewing of server side script files Risk: low/medium Exploitation: easy via browser Date: 17 Dec 2003 Author: Luigi Auriemma e-mail:...

CVE-2003-0169

hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service CPU consumption via a request to hpnst.exe that calls itself, which causes an infinite loop...

CVE-2003-0169

CVE-2003-0169 affects the GoAhead-Webs component used by HP Instant TopTools prior to version 5.55. Affected CGI hpnst.exe can cause a denial of service by looping when it calls itself, leading to CPU consumption and system instability. The vulnerability arises from an infinite loop triggered by ...

CVE-2002-1951

Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories...

GoAhead Web Server 2.1.x - .ASP File Source Code Disclosure

GoAhead Web Server 2.1.x - .ASP File Source Code Disclosure source: https://www.securityfocus.com/bid/9239/info A vulnerability in GoAhead webserver may result in the disclosure of the source code of ASP script files. The vulnerability occurs because the application fails to sanitize HTTP request...