GCVE - cpe:2.3:a:goahead:goahead_webserver:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:goahead:goahead_webserver:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Goahead (`d7a23c59-67d6-58e7-98b7-bdf209310bbb`)
Product	Goahead Webserver (`2eba3bdf-a308-578a-aaca-29ddd09355ef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/embedthis/goahead`	purl2cpe	2026-06-01 10:12:05.771230
`pkg:github/mvvelzen33/goahead`	purl2cpe	2026-06-01 10:12:05.771232

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-5111`	vulnerable	2026-06-08 04:51:52.033697	Details available GoAhead WebServer allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris. Published: 2011-12-27T18:00:00.000Z Updated: 2024-09-17T03:38:21.000Z Open on db.gcve.eu Reference links http://ha.ckers.org/slowloris/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1569`	vulnerable	2026-06-08 04:47:47.944901	Details available GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-16T17:14:44.117Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#windows-95-98-me-aux-denial-of-service	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2431`	vulnerable	2026-06-08 04:47:19.932530	Details available Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-17T02:42:04.200Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-sockgen-c	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2430`	vulnerable	2026-06-08 04:47:19.932235	Details available GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a socket disconnect to terminate a request before it has been fully processed by the server. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-16T22:35:37.353Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#cpu-utilization-hangs-at-100-on-a-socket-disconnect-bug01865	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2429`	vulnerable	2026-06-08 04:47:19.931880	Details available webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-16T17:19:07.175Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-webs-c	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2428`	vulnerable	2026-06-08 04:47:19.929555	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2427`	vulnerable	2026-06-08 04:47:19.928583	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.