CVE-2002-0680: GoAhead Software GoAhead Webserver

Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.

Affected products

• GoAhead Software GoAhead Webserver: version 2.1.1 only; version 2.1.2 only; version 2.1.3 only; version 2.1.4 only; version 2.1.5 only
• Montavista Software Hard Hat Linux: version 1.0 only
• Orange Software Orange Web Server: version 2.1 only

Published 2002-07-23. Last modified 2026-06-16.