CVE-2002-1603
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP...
CVE-2002-1603 is a medium vulnerability (CVSS 5.0) in Goahead Software Webserver, published February 13, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.7%, the 96th percentile. No source names a fixed version.
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, , %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.
Exploit likelihood
What each source reports
NVD Score used
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, , %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.
- Record
CVE-2002-1603- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, , %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.
- Record
CVE-2002-1603- Updated
- 2026-11-02
EUVDEUVD-2002-1584 No score
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, , %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.
- Record
EUVD-2002-1584- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xc79-9vgp-q8cm No score
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP...
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, , %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.
- Record
GHSA-xc79-9vgp-q8cm- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | GoAhead Web Server 2.1.x - '.ASP' File Source Code Disclosure | 2002-12-17 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |
References
exchange.xforce.ibmcloud.com/vulnerabilities/10885
kb.cert.org/vuls/id/975041
secunia.com/advisories/7741
rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729
procheckup.com/PDFs/ProCheckUp_Vulns_2002.pdf
Show 9 moreShow less
data.goahead.com/Software/Webserver/2.1.8/release.htm
securityfocus.com/bid/9239
aluigi.altervista.org/adv/goahead-adv3.txt
securitytracker.com/id?1005820
osvdb.org/13295
nvd.nist.gov/vuln/detail/CVE-2002-1603
github.com/advisories/GHSA-xc79-9vgp-q8cm