Orange Web Server v2.1 DoS

Introduction: Orange Web Server v2.1 is a powerful yet light- weight web server that runs on all Windows platforms. Easy to setup and use, Orange Web Server can turn any PC into a web server. The httpd is based on GoAhead c Technology. The Vendors website is:...

GoAhead Web Server Directory Traversal Vulnerability

Hello! We have found a bug in the GoAhead WebServer, v.2.0 and v.2.1. Attacker can get any file from the drive, where web-server was installed. try follow request http://www.somehost.com/............autoexec.bat This vulnerability may allow an attacker to execute code with the privileges of the...

Дырка в GoAhead WebServer

Обратный путь в директориях позволяет доступ к любым документам и выполнение приложений...

GoAhead Web Server 2.0/2.1 - Directory Traversal

source: https://www.securityfocus.com/bid/2334/info A specially crafted URL composed of '..' sequences along with the known filename will disclose the requested file. This vulnerability will also allow an attacker to execute arbitrary code with root privileges. Gaining access to a known file:...