CVE-2002-2431

Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-sockgen-c

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:goahead:goahead_webserver::::::::
	cpe:2.3:a:goahead:goahead_webserver:2.0:::::::*
	cpe:2.3:a:goahead:goahead_webserver:2.1:::::::*
	cpe:2.3:a:goahead:goahead_webserver:2.1.1:::::::*
	cpe:2.3:a:goahead:goahead_webserver:2.1.2:::::::*

History

No history.

Information

Published : 2009-02-06 19:30

Updated : 2009-02-09 05:00

NVD link : CVE-2002-2431

Mitre link : CVE-2002-2431

CVE.ORG link : CVE-2002-2431

JSON object : View

Products Affected

goahead

goahead_webserver

CWE

NVD-CWE-noinfo

{"id": "CVE-2002-2431", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-02-06T19:30:00.377", "references": [{"url": "http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-sockgen-c", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause \"incorrect behavior\" via unknown \"malicious code,\" related to incorrect use of the socketInputBuffered function by sockGen.c."}, {"lang": "es", "value": "Vulnerabilidad sin especificar en GoAhead WebServer anterior a v2.1.4 permite a atacantes remotos provocar \"funcionamiento incorrecto\" a trav\u00e9s de \"c\u00f3digo malicioso\" desconocido, relacionado con el uso incorrecto de la funci\u00f3n \"socketInputBuffered\" en sockGen.c."}], "lastModified": "2009-02-09T05:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:goahead:goahead_webserver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04F9AC93-B27F-4153-AD04-E54F06AF5334", "versionEndIncluding": "2.1.3"}, {"criteria": "cpe:2.3:a:goahead:goahead_webserver:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3111BC75-62C7-4710-99A6-258F6A07E8B7"}, {"criteria": "cpe:2.3:a:goahead:goahead_webserver:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "588A7477-B234-43C9-80AD-4AADC76F982C"}, {"criteria": "cpe:2.3:a:goahead:goahead_webserver:2.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FC0AB3F-B4A7-4D6B-B4CF-4024EAA59DE9"}, {"criteria": "cpe:2.3:a:goahead:goahead_webserver:2.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E68CF71-3251-406E-BC0D-079510EDDFFC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}