GCVE - cpe:2.3:a:goahead:goahead_webserver:2.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:goahead:goahead_webserver:2.1.1:*:*:*:*:*:*:*

part: a version: 2.1.1 update: *

Vendor	Goahead (`d7a23c59-67d6-58e7-98b7-bdf209310bbb`)
Product	Goahead Webserver (`2eba3bdf-a308-578a-aaca-29ddd09355ef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/embedthis/goahead`	purl2cpe	2026-06-01 10:12:05.771236
`pkg:github/mvvelzen33/goahead`	purl2cpe	2026-06-01 10:12:05.771238

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2003-1569`	vulnerable	2026-06-08 04:47:47.944997	Details available GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-16T17:14:44.117Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#windows-95-98-me-aux-denial-of-service	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1568`	vulnerable	2026-06-08 04:47:47.938922	Details available GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl function. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-16T19:56:50.380Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#null-pointer-crash-in-webssafeurl	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2431`	vulnerable	2026-06-08 04:47:19.932585	Details available Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-17T02:42:04.200Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-sockgen-c	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2429`	vulnerable	2026-06-08 04:47:19.931942	Details available webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-16T17:19:07.175Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-webs-c	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2428`	vulnerable	2026-06-08 04:47:19.931029	Details available webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP POST request that contains a Content-Length header but no body data. Published: 2009-02-06T19:00:00.000Z Updated: 2024-09-17T03:52:39.291Z Open on db.gcve.eu Reference links http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-webs-c	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.