CVE-2003-1569 GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ dev...
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| goahead webserver | <= 2.1.4 | No fix listed |
| goahead webserver | = 2.0 | No fix listed |
| goahead webserver | = 2.1 | No fix listed |
| goahead webserver | = 2.1.1 | No fix listed |
| goahead webserver | = 2.1.2 | No fix listed |
| goahead webserver | = 2.1.3 | No fix listed |