CVE-2001-0647: Orange Software Orange Web Server

Medium severity, CVSS 5.0. EPSS: 5.2% chance of exploitation in the next 30 days.

Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version.

Affected products

• Orange Software Orange Web Server: version 2.1 only

Published 2001-08-06. Last modified 2026-06-16.