CVE-2002-1603

CVE-2002-1603 affects GoAhead Web Server 2.1.7 and earlier: an attacker can obtain ASP source code by requesting a URL terminated with /, , %2f, %20, or %00, causing the ASP file to be returned unparsed. The issue is a data disclosure due to how the server handles certain URL terminations. The vu...

CVE-2001-0385

GoAhead WebServer is affected by DoS vulnerabilities in multiple paths. CVE-2001-0385 covers GoAhead WebServer 2.1 where a crafted HTTP request to the /aux directory can crash the daemon. Red Hat CVE-2003-1569 extends this on Windows 95/98/ME, showing that GoAhead WebServer before 2.1.5 can be fo...

CVE-2007-6702

CVE-2007-6702 affects the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device. The vulnerability exposes a password embedded in the typepassword field, which can be read from the HTML source by remote attackers, enabling password disclosure. The CVSS2 base score is 5.0 (MEDIUM) with netw...

CVE-2001-0228

CVE-2001-0228 describes a directory traversal vulnerability in the GoAhead Web Server up to version 2.1 and earlier. An attacker can read arbitrary files by crafting a URL containing a .. sequence in an HTTP GET request. This vulnerability is documented across multiple feeds (NVD entry) and is no...

CVE-2002-0680

CVE-2002-0680 describes a directory traversal vulnerability in GoAhead Web Server 2.1 where remote attackers can read arbitrary files by sending a URL containing an encoded backslash () within a .. sequence. This is evidenced by the NVD entry for CVE-2002-0680, which mirrors an older CVE-2001-022...

CVE-2002-0681

CVE-2002-0681 : A cross-site scripting vulnerability affects GoAhead Web Server 2.1. An attacker can deliver a URL containing script that, when a 404 Not Found page is generated, is not quoted, allowing script execution in another user context. CVSS data indicates a high base score (7.5) with net...

CVE-2002-1951

CVE-2002-1951 describes a buffer overflow in GoAhead WebServer 2.1 . An attacker can trigger the overflow by sending a long HTTP GET request with a large number of subdirectories, potentially enabling remote code execution. The available documents do not provide specific details on the vulnerable...

CVE-2003-1568

GoAhead WebServer (pre-2.1.6) is affected by a denial of service via a NULL pointer dereference in websSafeUrl triggered by an invalid URL, causing daemon crash. This vulnerability is documented across multiple sources (including NVD/RH-CVE) with the same root cause. Remediation guidance points t...