GCVE - cpe:2.3:a:goahead:goahead_webserver:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:goahead:goahead_webserver:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

Vendor	Goahead (`d7a23c59-67d6-58e7-98b7-bdf209310bbb`)
Product	Goahead Webserver (`2eba3bdf-a308-578a-aaca-29ddd09355ef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/embedthis/goahead`	purl2cpe	2026-06-01 10:12:05.771228
`pkg:github/mvvelzen33/goahead`	purl2cpe	2026-06-01 10:12:05.771231

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2003-1569`	vulnerable	2026-06-08 04:47:47.944951	Details available GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-16T17:14:44.117Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#windows-95-98-me-aux-denial-of-service	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1568`	vulnerable	2026-06-08 04:47:47.937843	Details available GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl function. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-16T19:56:50.380Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#null-pointer-crash-in-webssafeurl	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2431`	vulnerable	2026-06-08 04:47:19.932550	Details available Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-17T02:42:04.200Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-sockgen-c	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2430`	vulnerable	2026-06-08 04:47:19.932255	Details available GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a socket disconnect to terminate a request before it has been fully processed by the server. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-16T22:35:37.353Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#cpu-utilization-hangs-at-100-on-a-socket-disconnect-bug01865	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2429`	vulnerable	2026-06-08 04:47:19.931904	Details available webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-16T17:19:07.175Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-webs-c	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2428`	vulnerable	2026-06-08 04:47:19.929578	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2427`	vulnerable	2026-06-08 04:47:19.929190	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.