Show filters
15 Total Results
Displaying 1-10 of 15
Sort by:
Attacker Value
Unknown
CVE-2009-5111
Disclosure Date: December 27, 2011 (last updated October 04, 2023)
GoAhead WebServer allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
0
Attacker Value
Unknown
CVE-2011-4273
Disclosure Date: November 03, 2011 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.
0
Attacker Value
Unknown
CVE-2002-2428
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP POST request that contains a Content-Length header but no body data.
0
Attacker Value
Unknown
CVE-2003-1568
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl function.
0
Attacker Value
Unknown
CVE-2003-1569
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385.
0
Attacker Value
Unknown
CVE-2002-2430
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a socket disconnect to terminate a request before it has been fully processed by the server.
0
Attacker Value
Unknown
CVE-2002-2427
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603.
0
Attacker Value
Unknown
CVE-2002-2429
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header.
0
Attacker Value
Unknown
CVE-2002-2431
Disclosure Date: February 06, 2009 (last updated October 04, 2023)
Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c.
0
Attacker Value
Unknown
CVE-2007-6702
Disclosure Date: March 04, 2008 (last updated October 04, 2023)
goform/QuickStart_c0 on the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device contains a password in the typepassword field, which allows remote attackers to obtain this password by reading the HTML source, a different vulnerability than CVE-2002-1603.
0
