PatchTheCVEgoahead webserver vulnerabilities and fixes
Recent CVEs affecting goahead webserver, with upgrade or downgrade steps. 9 tracked.
Also searched as: goaheadwebserver.
goahead webserver has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2011-12-27. Highest priority: CVE-2011-4273 (score 43/100).
- CVE-2011-4273 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject
- CVE-2009-5111 MEDIUM 5.0 MITIGATE GoAhead WebServer allows remote attackers to cause a denial of service (daemon outage) via partial HTTP reques
- CVE-2003-1569 MEDIUM 5.0 UPGRADE GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service
- CVE-2003-1568 MEDIUM 5.0 DOWNGRADE UPGRADE GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference
- CVE-2002-2431 HIGH 7.5 UPGRADE Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavi
- CVE-2002-2430 MEDIUM 5.0 UPGRADE GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by perfo
- CVE-2002-2429 MEDIUM 5.0 UPGRADE webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) v
- CVE-2002-2428 MEDIUM 5.0 UPGRADE webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer de
- CVE-2002-2427 MEDIUM 5.0 UPGRADE The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and ob
FAQ
How do I fix goahead webserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is goahead webserver being exploited right now?
None of the tracked goahead webserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which goahead webserver CVE should I patch first?
CVE-2011-4273 currently ranks highest (43/100): Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject.