CVE-2002-2427: Medium severity pwebserver web server vulnerability
Published Feb 6, 2009
·Updated
The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603.
Affected Software
2 affected components
GoAhead GoAhead Webserver<=2.1
GoAhead GoAhead Webserver=2.0
Event History
Feb 6, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2427?
CVE-2002-2427 is considered a medium severity vulnerability that allows unauthorized access to protected content.
2
How do I fix CVE-2002-2427?
To fix CVE-2002-2427, upgrade GoAhead WebServer to version 2.1.1 or later to eliminate the authentication bypass risk.
3
Which versions of GoAhead WebServer are affected by CVE-2002-2427?
CVE-2002-2427 affects GoAhead WebServer versions 2.0 and earlier, up to 2.1.
4
Can CVE-2002-2427 be exploited remotely?
Yes, CVE-2002-2427 can be exploited remotely by attackers using an extra slash in the URL.
5
What functional issues may arise from CVE-2002-2427?
CVE-2002-2427 may result in unauthorized users gaining access to protected web content, potentially leading to data breaches.