Goahead Webserver
Vendor:
First CVE: May 3, 2001 · Active for 25 years
8
Total CVEs
More Total CVEs than 87% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 63% of tracked products
5.6
Avg CVSS
Higher Avg CVSS than 19% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Goahead Webserver over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 3, 2001
25 years ago
Most Recent CVE
Feb 6, 2009
6,381 days ago
CVE Severity & Scoring
Goahead Webserver8 CVEs
75%
25%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown8 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown8 (100.0%)
User Interaction
None0 (0.0%)
Unknown8 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown8 (100.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2002-1951HIGH Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories. | Dec 31, 2002 | 7.5 | 36 | NO | YES |
CVE-2002-1603MEDIUM GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (encoded /), %20 (encoded space), or %00 ( | Feb 13, 2002 | 5.0 | 34 | NO | YES |
CVE-2002-0681HIGH Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" messa | Jul 23, 2002 | 7.5 | 31 | NO | YES |
CVE-2002-0680MEDIUM Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it | Jul 23, 2002 | 5.0 | 25 | NO | YES |
CVE-2001-0385MEDIUM GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory. | Jul 2, 2001 | 5.0 | 25 | NO | YES |
CVE-2007-6702MEDIUM goform/QuickStart_c0 on the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device contains a password in the typepassword field, which allows remote attackers to obtain this | Mar 4, 2008 | 5.0 | 23 | NO | YES |
CVE-2001-0228MEDIUM Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request. | May 3, 2001 | 5.0 | 23 | NO | YES |
CVE-2003-1568MEDIUM GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl funct | Feb 6, 2009 | 5.0 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
7 CVEs
87.5% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Goahead Webserver
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| v.2.1 | 1 | 5.0 | 3.6% | 0 | 1 |
| v.2.0 | 1 | 5.0 | 3.6% | 0 | 1 |
| 2.1.7 | 1 | 5.0 | 13.7% | 0 | 1 |
| 2.1.6 | 1 | 5.0 | 13.7% | 0 | 1 |
| 2.1.5 | 3 | 5.8 | 8.5% | 0 | 3 |
| 2.1.4 | 4 | 5.6 | 6.8% | 0 | 3 |
| 2.1.3 | 4 | 5.6 | 6.8% | 0 | 3 |
| 2.1.2 | 3 | 5.8 | 8.5% | 0 | 3 |
| 2.1.1 | 3 | 5.8 | 8.5% | 0 | 3 |
| 2.1 | 3 | 5.8 | 9.3% | 0 | 3 |
| 2.0 | 1 | 5.0 | 13.7% | 0 | 1 |