CVE-2002-0680

Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read...

5.0 MediumPublic exploit

CVE-2002-0680 is a medium vulnerability (CVSS 5.0) in Orange Software Web Server, published July 12, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.49%, the 89th percentile. No source names a fixed version.

Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.

Exploit likelihood

3.49%Down 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2002-0680
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2002-0680
Updated: 2026-11-02

EUVDEUVD-2002-0674 No score

Record: EUVD-2002-0674
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vc5x-9m2r-pv7f No score

Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read...

Record: GHSA-vc5x-9m2r-pv7f
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	GoAhead Web Server 2.1.x - URL Encoded Slash Directory Traversal	2002-07-10

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD