CVE-2001-0228
published 2001-05-03CVE-2001-0228: Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request.
PriorityP425medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
3.56%
87.9th percentile
Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| goahead_software | goahead_webserver | — | — |
| goahead_software | goahead_webserver | — | — |
| goahead_software | goahead_webserver | — | — |
| goahead_software | goahead_webserver | — | — |
| goahead_software | goahead_webserver | — | — |
| goahead_software | goahead_webserver | — | — |
| goahead_software | goahead_webserver | — | — |
| montavista_software | hard_hat_linux | — | — |
| orange_software | orange_web_server | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vc5x-9m2r-pv7f: Directory traversal vulnerability in GoAhead Web Server 2
ghsa_unreviewed·2022-04-30·CVSS 5.0
CVE-2002-0680 [MEDIUM] GHSA-vc5x-9m2r-pv7f: Directory traversal vulnerability in GoAhead Web Server 2
Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.
GHSA
GHSA-rrcg-45g6-6q56: Directory traversal vulnerability in GoAhead web server 2
ghsa_unreviewed·2022-04-30
CVE-2001-0228 [MEDIUM] GHSA-rrcg-45g6-6q56: Directory traversal vulnerability in GoAhead web server 2
Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request.
No detection rules found.
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/bugtraq/2001-02/0022.htmlhttp://freecode.com/projects/embedthis-goahead-webserver/releases/343539http://osvdb.org/81099http://archives.neohapsis.com/archives/bugtraq/2001-02/0022.htmlhttp://freecode.com/projects/embedthis-goahead-webserver/releases/343539http://osvdb.org/81099
2001-05-03
Published