CVE-2002-1603

{"id": "CVE-2002-1603", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-02-13T05:00:00.000", "references": [{"url": "http://aluigi.altervista.org/adv/goahead-adv3.txt", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://data.goahead.com/Software/Webserver/2.1.8/release.htm#bug-with-urls-like-asp", "source": "cve@mitre.org"}, {"url": "http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/7741", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1005820", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/124059", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/975041", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/RGII-7MWKZ3", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/13295", "source": "cve@mitre.org"}, {"url": "http://www.procheckup.com/PDFs/ProCheckUp_Vulns_2002.pdf", "source": "cve@mitre.org"}, {"url": "http://www.procheckup.com/security_info/vuln_pr0213.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/9239", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10885", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \\, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed."}], "lastModified": "2017-07-11T01:29:16.180", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:goahead_software:goahead_webserver:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49A1B406-C1F8-468B-B1A9-F016EBCC4AFA"}, {"criteria": "cpe:2.3:a:goahead_software:goahead_webserver:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08178800-0020-4052-AFA8-BC21B10AF491"}, {"criteria": "cpe:2.3:a:goahead_software:goahead_webserver:2.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21EFC04A-DC4A-4491-BAFC-996F8C127438"}, {"criteria": "cpe:2.3:a:goahead_software:goahead_webserver:2.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40304420-26E0-4F6D-B368-7BBC068CCCCB"}, {"criteria": "cpe:2.3:a:goahead_software:goahead_webserver:2.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B147EAF-E6A0-4D0C-8C27-BA27F844A816"}, {"criteria": "cpe:2.3:a:goahead_software:goahead_webserver:2.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B729D721-2FD3-4522-8CB3-526B7454D124"}, {"criteria": "cpe:2.3:a:goahead_software:goahead_webserver:2.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56B99EBA-8968-4948-9650-36CC2B95AD01"}, {"criteria": "cpe:2.3:a:goahead_software:goahead_webserver:2.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2929801F-548E-490A-9A98-F5DE17A1BD52"}, {"criteria": "cpe:2.3:a:goahead_software:goahead_webserver:2.1.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD03EDC6-0841-41E6-BD54-17578239DB48"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}