CVE-2002-2431

GoAhead WebServer before 2.1.4 is affected by a vulnerability in sockGen.c caused by incorrect use of socketInputBuffered, allowing remote attackers to trigger incorrect behavior via malicious code. The issue is documented across multiple feeds (NVD/Red Hat/CVE records) and is addressed in the Go...

CVE-2002-2427

CVE-2002-2427 affects GoAhead WebServer prior to 2.1.1, where the security handler could be bypassed to access protected web content via an extra slash in the URL. The issue is documented as a separate vulnerability from CVE-2002-1603. Public records in NVD indicate a base score of 5.0 (Medium) w...

CVE-2002-2430

CVE-2002-2430 affects GoAhead WebServer prior to version 2.1.1. The vulnerability is a denial of service caused by remote-triggered socket disconnects that terminate a request before it has been fully processed, leading to increased CPU usage. The available documents identify the affected product...

CVE-2009-5111

Affected product: GoAhead WebServer. Vulnerability arises from handling of partial HTTP requests, enabling remote attackers to cause a denial of service (daemon outage) as demonstrated by Slowloris. Exploitation details and practical impact are stated; no patch/version or remediation is provided ...

CVE-2011-4273

CVE-2011-4273 affects Embedthis GoAhead WebServer 2.18. The vulnerability is a set of cross-site scripting (XSS) issues that allow remote attackers to inject arbitrary web script or HTML via: (1) the group parameter to goform/AddGroup (addgroup.asp), (2) the url parameter to goform/AddAccessLimit...

CVE-2003-1569

CVE-2003-1569 affects GoAhead WebServer prior to 2.1.5 on Windows 95/98/ME. A remote attacker can crash the daemon by sending an HTTP request that includes a path component with a device name (con, nul, clock$, or config$), producing a denial of service. This differs from CVE-2001-0385 in vector ...

CVE-2002-2428

CVE-2002-2428 affects the GoAhead WebServer (webs.c) prior to version 2.1.4. A remote attacker can trigger a NULL pointer dereference and daemon crash by sending an HTTP POST with a Content-Length header but no body data, resulting in a denial of service. Affected product: GoAhead WebServer; vuln...

CVE-2003-1568

GoAhead WebServer (pre-2.1.6) is affected by a denial of service via a NULL pointer dereference in websSafeUrl triggered by an invalid URL, causing daemon crash. This vulnerability is documented across multiple sources (including NVD/RH-CVE) with the same root cause. Remediation guidance points t...

CVE-2002-2429

The vulnerability affects GoAhead WebServer, specifically the webs.c component, in versions before 2.1.4. A remote attacker can crash the daemon by sending an HTTP POST with a negative integer in the Content-Length header, leading to a denial of service. The issue is documented across multiple so...