CVE-2002-0680

Published: Jul 23, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.

Affected (7)

Products: Goahead Software: Goahead Webserver · Orange Software: Orange Web Server · Montavista Software: Hard Hat Linux

1 product

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Goahead Software Goahead Webserver	Version 2.1.1
Goahead Software Goahead Webserver	Version 2.1.2
Goahead Software Goahead Webserver	Version 2.1.3
Goahead Software Goahead Webserver	Version 2.1.4
Goahead Software Goahead Webserver	Version 2.1.5
Orange Software Orange Web Server	Version 2.1