NetSight
IP …
medium5.0Public exploit code

CVE-2002-0680

Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a ..

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.

Affected products

VendorProductAffected versions
Goahead SoftwareGoahead Webserver
Versions 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5
Orange SoftwareOrange Web Server
Version 2.1
Montavista SoftwareHard Hat Linux
Version 1.0

References