medium5.0
CVE-2002-2427
The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extr…
Impact
The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Goahead | Goahead Webserver | through 2.1 Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://data.goahead.com/Software/Webserver/2.1.8/release.htm#security-features-can-be-bypassed-by-adding-an-extra-slash-in-the-url-bug01518
- http://www.kb.cert.org/vuls/id/124059
- http://data.goahead.com/Software/Webserver/2.1.8/release.htm#security-features-can-be-bypassed-by-adding-an-extra-slash-in-the-url-bug01518
- http://www.kb.cert.org/vuls/id/124059