Vulnerability Details CVE-2003-1569
GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.9%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2003-1569
-
cpe:2.3:a:goahead:goahead_webserver:2.0
-
cpe:2.3:a:goahead:goahead_webserver:2.1
-
cpe:2.3:a:goahead:goahead_webserver:2.1.1
-
cpe:2.3:a:goahead:goahead_webserver:2.1.2
-
cpe:2.3:a:goahead:goahead_webserver:2.1.3
-
cpe:2.3:a:goahead:goahead_webserver:2.1.4
-
cpe:2.3:o:microsoft:windows_95:-
-
cpe:2.3:o:microsoft:windows_98:-
-
cpe:2.3:o:microsoft:windows_98:beta
-
cpe:2.3:o:microsoft:windows_me:-