CVE-2002-0680
published 2002-07-23CVE-2002-0680: Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot)…
PriorityP426medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
3.49%
87.7th percentile
Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| goahead_software | goahead_webserver | — | — |
| goahead_software | goahead_webserver | — | — |
| goahead_software | goahead_webserver | — | — |
| goahead_software | goahead_webserver | — | — |
| goahead_software | goahead_webserver | — | — |
| montavista_software | hard_hat_linux | — | — |
| orange_software | orange_web_server | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
GPL FTP LIST directory traversal attempt
suricata·2010-09-23
CVE-2002-1054 GPL FTP LIST directory traversal attempt
GPL FTP LIST directory traversal attempt
Rule: alert ftp $EXTERNAL_NET any -> $HOME_NET any (msg:"GPL FTP LIST directory traversal attempt"; flow:established,to_server; content:"LIST"; nocase; content:".."; distance:1; content:".."; distance:1; reference:cve,2002-1054; reference:bugtraq,2618; reference:nessus,11112; reference:cve,2001-0680; classtype:protocol-command-decode; sid:2101992; rev:12; metadata:created_at 2010_09_23, cve CVE_2001_0680, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_11_26, mitre_tactic_id TA0007, mitre_tactic_name Discovery, mitre_technique_id T1083, mitre_technique_name File_And_Directory_Discovery; target:dest_ip;)
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.htmlhttp://freecode.com/projects/embedthis-goahead-webserver/releases/343539http://marc.info/?l=bugtraq&m=102631742711795&w=2http://marc.info/?l=bugtraq&m=102709382714597&w=2http://osvdb.org/81099http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.htmlhttp://freecode.com/projects/embedthis-goahead-webserver/releases/343539http://marc.info/?l=bugtraq&m=102631742711795&w=2http://marc.info/?l=bugtraq&m=102709382714597&w=2http://osvdb.org/81099
2002-07-23
Published