Lucene search

[email protected]CVE-2002-0680

HistoryJul 23, 2002 - 4:00 a.m.

CVE-2002-0680

2002-07-2304:00:00

[email protected]

web.nvd.nist.gov

cve-2002-0680

directory traversal

goahead web server

web security

remote attack

vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.4%

JSON

Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a … (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.

Affected configurations

NVD

Node

goahead_softwaregoahead_webserverMatch2.1.1

goahead_softwaregoahead_webserverMatch2.1.2

goahead_softwaregoahead_webserverMatch2.1.3

goahead_softwaregoahead_webserverMatch2.1.4

goahead_softwaregoahead_webserverMatch2.1.5

orange_softwareorange_web_serverMatch2.1

Node

montavista_softwarehard_hat_linuxMatch1.0

CPENameOperatorVersion
goahead_software:goahead_webservergoahead software goahead webservereq2.1.1
goahead_software:goahead_webservergoahead software goahead webservereq2.1.2
goahead_software:goahead_webservergoahead software goahead webservereq2.1.3
goahead_software:goahead_webservergoahead software goahead webservereq2.1.4
goahead_software:goahead_webservergoahead software goahead webservereq2.1.5
orange_software:orange_web_serverorange software orange web servereq2.1

CPE	Name	Operator	Version
goahead_software:goahead_webserver	goahead software goahead webserver	eq	2.1.1
goahead_software:goahead_webserver	goahead software goahead webserver	eq	2.1.2
goahead_software:goahead_webserver	goahead software goahead webserver	eq	2.1.3
goahead_software:goahead_webserver	goahead software goahead webserver	eq	2.1.4
goahead_software:goahead_webserver	goahead software goahead webserver	eq	2.1.5
orange_software:orange_web_server	orange software orange web server	eq	2.1

References

archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.html

freecode.com/projects/embedthis-goahead-webserver/releases/343539

marc.info/?l=bugtraq&m=102631742711795&w=2

marc.info/?l=bugtraq&m=102709382714597&w=2

osvdb.org/81099

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.4%

JSON

Related for CVE-2002-0680

nvd2 cvelist2 cve1