CVE-2002-0680 Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that...
MediumCVSS 5.0
EPSS 3.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| goahead software goahead webserver | = 2.1.1 | No fix listed |
| goahead software goahead webserver | = 2.1.2 | No fix listed |
| goahead software goahead webserver | = 2.1.3 | No fix listed |
| goahead software goahead webserver | = 2.1.4 | No fix listed |
| goahead software goahead webserver | = 2.1.5 | No fix listed |
| orange software orange web server | = 2.1 | No fix listed |
| montavista software hard hat linux | = 1.0 | No fix listed |
References
- 20020710 [VulnWatch] wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting mailing-list vendor-advisory
- freecode.com
- 20020710 wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting mailing-list
- 20020719 Re: [VulnWatch] wp-02-0001: GoAhead Web Server Directory Traversal + Cross Site Scripting mailing-list
- 81099 vdb-entry