Sign-up

ID

VAR-200105-0024


CVE

CVE-2001-0228


TITLE

GoAhead web server Directory traversal vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200105-040

DESCRIPTION

Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request. GoAhead WebServer is prone to a directory traversal vulnerability

Trust: 1.26

sources: NVD: CVE-2001-0228 // BID: 88638 // VULHUB: VHN-3050

AFFECTED PRODUCTS

vendor:goaheadmodel:webserverscope:eqversion:v.2.0

Trust: 1.6

vendor:goaheadmodel:webserverscope:eqversion:v.2.1

Trust: 1.6

vendor:goaheadmodel:software goahead webserverscope:eqversion:v.2.0

Trust: 0.3

vendor:goaheadmodel:software goahead webserverscope:eqversion:v.2.1

Trust: 0.3

sources: BID: 88638 // CNNVD: CNNVD-200105-040 // NVD: CVE-2001-0228

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2001-0228
value: MEDIUM

Trust: 1.0

CNNVD: CNNVD-200105-040
value: MEDIUM

Trust: 0.6

VULHUB: VHN-3050
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2001-0228
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-3050
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-3050 // CNNVD: CNNVD-200105-040 // NVD: CVE-2001-0228

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2001-0228

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200105-040

TYPE

path traversal

Trust: 0.6

sources: CNNVD: CNNVD-200105-040

EXPLOIT AVAILABILITY

sources:
            
            
            VULHUB: VHN-3050

EXTERNAL IDS
db:NVDid:CVE-2001-0228
Trust: 2.0
db:OSVDBid:81099
Trust: 1.1
db:CNNVDid:CNNVD-200105-040
Trust: 0.7
db:BUGTRAQid:20010202 GOAHEAD WEB SERVER DIRECTORY TRAVERSAL VULNERABILITY
Trust: 0.6
db:BIDid:88638
Trust: 0.4
db:EXPLOIT-DBid:20607
Trust: 0.1
db:SEEBUGid:SSVID-74476
Trust: 0.1
db:VULHUBid:VHN-3050
Trust: 0.1
sources:
            
            
            VULHUB: VHN-3050 // 
            
            
            
            BID: 88638 // 
            
            
            
            CNNVD: CNNVD-200105-040 // 
            
            
            
            NVD: CVE-2001-0228

REFERENCES
url:http://archives.neohapsis.com/archives/bugtraq/2001-02/0022.html
Trust: 2.0
url:http://freecode.com/projects/embedthis-goahead-webserver/releases/343539
Trust: 1.1
url:http://osvdb.org/81099
Trust: 1.1
sources:
            
            
            VULHUB: VHN-3050 // 
            
            
            
            BID: 88638 // 
            
            
            
            CNNVD: CNNVD-200105-040 // 
            
            
            
            NVD: CVE-2001-0228

CREDITS
Unknown
Trust: 0.3
sources:
            
            
            BID: 88638

SOURCES
db:VULHUBid:VHN-3050
db:BIDid:88638
db:CNNVDid:CNNVD-200105-040
db:NVDid:CVE-2001-0228

LAST UPDATE DATE
2025-04-03T21:27:38.226000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-3050date:2017-12-20T00:00:00
db:BIDid:88638date:2001-05-03T00:00:00
db:CNNVDid:CNNVD-200105-040date:2005-10-20T00:00:00
db:NVDid:CVE-2001-0228date:2025-04-03T01:03:51.193

SOURCES RELEASE DATE
db:VULHUBid:VHN-3050date:2001-05-03T00:00:00
db:BIDid:88638date:2001-05-03T00:00:00
db:CNNVDid:CNNVD-200105-040date:2001-05-03T00:00:00
db:NVDid:CVE-2001-0228date:2001-05-03T04:00:00