Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown

CVE-2002-2428

Disclosure Date: February 06, 2009 (last updated October 04, 2023)
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP POST request that contains a Content-Length header but no body data.
0
0
Attacker Value
Unknown

CVE-2003-1568

Disclosure Date: February 06, 2009 (last updated October 04, 2023)
GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl function.
0
0
Attacker Value
Unknown

CVE-2003-1569

Disclosure Date: February 06, 2009 (last updated October 04, 2023)
GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385.
0
0
Attacker Value
Unknown

CVE-2002-2429

Disclosure Date: February 06, 2009 (last updated October 04, 2023)
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header.
0
0
Attacker Value
Unknown

CVE-2002-2431

Disclosure Date: February 06, 2009 (last updated October 04, 2023)
Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c.
0
0
Attacker Value
Unknown

CVE-2002-0681

Disclosure Date: July 23, 2002 (last updated February 22, 2025)
Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.
0
0
Attacker Value
Unknown

CVE-2002-1603

Disclosure Date: February 13, 2002 (last updated February 22, 2025)
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.
0
0