CVE-2002-1603

Published: Feb 13, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.

Affected (9)

Products: Goahead Software: Goahead Webserver

Goahead Software

1 product

Goahead Webserver

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Goahead Software Goahead Webserver	Version 2.0
Goahead Software Goahead Webserver	Version 2.1.1
Goahead Software Goahead Webserver	Version 2.1.2
Goahead Software Goahead Webserver	Version 2.1.3
Goahead Software Goahead Webserver	Version 2.1.4
Goahead Software Goahead Webserver	Version 2.1.5
Goahead Software Goahead Webserver	Version 2.1.6
Goahead Software Goahead Webserver	Version 2.1.7
Goahead Software Goahead Webserver	Version 2.1

References (26)

http://aluigi.altervista.org/adv/goahead-adv3.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://data.goahead.com/Software/Webserver/2.1.8/release.htm#bug-with-urls-like-asp

Source: cve@mitre.org

http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729

Source: cve@mitre.org

http://secunia.com/advisories/7741

Source: cve@mitre.org

http://securitytracker.com/id?1005820

Source: cve@mitre.org

Exploit

http://www.kb.cert.org/vuls/id/124059

Source: cve@mitre.org

US Government Resource

http://www.kb.cert.org/vuls/id/975041

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/RGII-7MWKZ3

Source: cve@mitre.org

http://www.osvdb.org/13295

Source: cve@mitre.org

http://www.procheckup.com/PDFs/ProCheckUp_Vulns_2002.pdf

Source: cve@mitre.org

http://www.procheckup.com/security_info/vuln_pr0213.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/9239

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/10885

Source: cve@mitre.org

http://aluigi.altervista.org/adv/goahead-adv3.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://data.goahead.com/Software/Webserver/2.1.8/release.htm#bug-with-urls-like-asp

Source: af854a3a-2127-422b-91ae-364da2661108

http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/7741

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1005820

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.kb.cert.org/vuls/id/124059

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.kb.cert.org/vuls/id/975041

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/RGII-7MWKZ3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/13295

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.procheckup.com/PDFs/ProCheckUp_Vulns_2002.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.procheckup.com/security_info/vuln_pr0213.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/9239

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/10885

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.