Vulnerabilities > Goahead > Goahead Webserver > 2.1.2

DATE CVE VULNERABILITY TITLE RISK
2009-02-06 CVE-2003-1569 Improper Input Validation vulnerability in Goahead Webserver
GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385.
network
low complexity
goahead microsoft CWE-20
5.0
2009-02-06 CVE-2003-1568 Improper Input Validation vulnerability in multiple products
GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl function.
network
low complexity
goahead goahead-software CWE-20
5.0
2009-02-06 CVE-2002-2431 Unspecified vulnerability in Goahead Webserver
Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c.
network
low complexity
goahead
7.5
2009-02-06 CVE-2002-2429 Improper Input Validation vulnerability in Goahead Webserver
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header.
network
low complexity
goahead CWE-20
5.0
2009-02-06 CVE-2002-2428 Improper Input Validation vulnerability in Goahead Webserver
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP POST request that contains a Content-Length header but no body data.
network
low complexity
goahead CWE-20
5.0