Details of VAR-200212-0399

ID

VAR-200212-0399

CVE

CVE-2002-1951

TITLE

GoAhead WebServer Remote buffer overflow vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200212-411

DESCRIPTION

Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories. GoAhead WebServer is an Open Source embedded web server which supports Active Server Pages, embedded javascript, and SSL authentication and encryption. It is available for a variety of platforms including Microsoft Windows and Linux variant operating systems. It has been discovered that a buffer overflow exists in GoAhead WebServer. This could lead to an attacker gaining remote access to a vulnerable host. GoAhead WebServer lacks correct processing of URL requests submitted by users. <**>

Trust: 1.26

sources: NVD: CVE-2002-1951 // BID: 5464 // VULHUB: VHN-6334

AFFECTED PRODUCTS

vendor:	goahead	model:	webserver	scope:	eq	version:	2.1	Trust: 1.6
vendor:	goahead	model:	software goahead webserver	scope:	eq	version:	2.1	Trust: 0.3

sources: BID: 5464 // CNNVD: CNNVD-200212-411 // NVD: CVE-2002-1951

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2002-1951
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200212-411
value:	HIGH
Trust: 0.6
VULHUB:	VHN-6334
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2002-1951
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-6334
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-6334 // CNNVD: CNNVD-200212-411 // NVD: CVE-2002-1951

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2002-1951

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200212-411

TYPE

Boundary Condition Error

Trust: 0.9

sources: BID: 5464 // CNNVD: CNNVD-200212-411

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-6334

EXTERNAL IDS

db:	BID	id:	5464	Trust: 2.0
db:	NVD	id:	CVE-2002-1951	Trust: 1.7
db:	OSVDB	id:	81099	Trust: 1.1
db:	CNNVD	id:	CNNVD-200212-411	Trust: 0.7
db:	XF	id:	9884	Trust: 0.6
db:	NSFOCUS	id:	3325	Trust: 0.6
db:	SEEBUG	id:	SSVID-75530	Trust: 0.1
db:	EXPLOIT-DB	id:	21707	Trust: 0.1
db:	VULHUB	id:	VHN-6334	Trust: 0.1

sources: VULHUB: VHN-6334 // BID: 5464 // CNNVD: CNNVD-200212-411 // NVD: CVE-2002-1951

REFERENCES

url:	http://www.securityfocus.com/bid/5464	Trust: 1.7
url:	http://www.securiteam.com/securitynews/5mp0c1580w.html	Trust: 1.7
url:	http://www.iss.net/security_center/static/9884.php	Trust: 1.7
url:	http://freecode.com/projects/embedthis-goahead-webserver/releases/343539	Trust: 1.1
url:	http://osvdb.org/81099	Trust: 1.1
url:	http://www.nsfocus.net/vulndb/3325	Trust: 0.6
url:	http://www.goahead.com/webserver/webserver.htm	Trust: 0.3

sources: VULHUB: VHN-6334 // BID: 5464 // CNNVD: CNNVD-200212-411 // NVD: CVE-2002-1951

CREDITS

Vulnerability discovery credited to an anonymous source.

Trust: 0.3

sources: BID: 5464

SOURCES

db:	VULHUB	id:	VHN-6334
db:	BID	id:	5464
db:	CNNVD	id:	CNNVD-200212-411
db:	NVD	id:	CVE-2002-1951

LAST UPDATE DATE

2024-08-14T12:09:21.984000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-6334	date:	2017-12-20T00:00:00
db:	BID	id:	5464	date:	2002-08-14T00:00:00
db:	CNNVD	id:	CNNVD-200212-411	date:	2005-10-20T00:00:00
db:	NVD	id:	CVE-2002-1951	date:	2017-12-20T02:29:00.693

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-6334	date:	2002-12-31T00:00:00
db:	BID	id:	5464	date:	2002-08-14T00:00:00
db:	CNNVD	id:	CNNVD-200212-411	date:	2002-08-14T00:00:00
db:	NVD	id:	CVE-2002-1951	date:	2002-12-31T05:00:00