https://www.exploit-db.com/exploits/21607
https://www.securityfocus.com/bid/89464
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200207-085

GoAheadWebServer2.1版本存在目录遍历漏洞。远程攻击者可以借助在..（点点）序列中带有编码的/(%5C)的URL读取任意文件。

source: http://www.securityfocus.com/bid/5197/info

A vulnerability has been reported for GoAhead WebServer 2.1. Reportedly, it is possible to launch directory traversal attacks against GoAhead WebServer. It is possible for remote attackers to access arbitrary files residing on a vulnerable host.

It has been reported that it is possible to exploit this vulnerability to access arbitrary files on the server through a directory traversal attack. GoAhead WebServer correctly prevents attackers from using '../' sequences for directory traversal attacks. However, it does not prevent attackers from using URL encoded substitutions for the '/' character.

** Orange Web Server 2.1 is based upon GoAhead WebServer. It has been reported that Orange Web Server 2.1 is also vulnerable to this issue.

** It is also possible to connect directly to a GoAhead WebServer using netcat or telnet and issuing a GET command for a known file using regular directory traversal sequences. There is no requirement for encoding the '/' character as '%5C'. Instead an attacker can obtain files by using '....' sequences.

GoAhead-server/..%5C..%5C..%5C..%5C..%5C..%5C/winnt/win.ini

Orange Software Orange Web Server 2.1

MontaVista Software Hard Hat Linux 1.0

GoAhead Software GoAhead WebServer 2.1.5

GoAhead Software GoAhead WebServer 2.1.4

GoAhead Software GoAhead Web

来源:VULNWATCH
名称:20020710[VulnWatch]wp-02-0001:GoAheadWebServerDirectoryTraversal+CrossSiteScripting
链接:http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.html
来源:BUGTRAQ
名称:20020719Re:[VulnWatch]wp-02-0001:GoAheadWebServerDirectoryTraversal+CrossSiteScripting
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=102709382714597&w;=2
来源:BUGTRAQ
名称:20020710wp-02-0001:GoAheadWebServerDirectoryTraversal+CrossSiteScripting
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=102631742711795&w;=2