Vulnerabilities > Goahead > Goahead Webserver > 2.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2009-02-06 | CVE-2003-1569 | Improper Input Validation vulnerability in Goahead Webserver GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385. | 5.0 |
2009-02-06 | CVE-2003-1568 | Improper Input Validation vulnerability in multiple products GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl function. | 5.0 |
2009-02-06 | CVE-2002-2431 | Unspecified vulnerability in Goahead Webserver Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c. | 7.5 |
2009-02-06 | CVE-2002-2430 | Resource Management Errors vulnerability in Goahead Webserver 2.0/2.1 GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a socket disconnect to terminate a request before it has been fully processed by the server. | 5.0 |
2009-02-06 | CVE-2002-2429 | Improper Input Validation vulnerability in Goahead Webserver webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header. | 5.0 |
2009-02-06 | CVE-2002-2428 | Improper Input Validation vulnerability in Goahead Webserver webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP POST request that contains a Content-Length header but no body data. | 5.0 |
2009-02-06 | CVE-2002-2427 | Improper Authentication vulnerability in Goahead Webserver 2.0/2.1 The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603. | 5.0 |