A vulnerable version of GoAhead Webserver is running on the remote host. Description : GoAhead Webserver is installed on the remote system. It's an open-source webserver, which is capable of hosting ASP pages, and installation on multiple operating systems. The version installed is vulnerable to Script Source Code Disclosure, by adding extra characters to the URL. Possible characters are %00, %5C, %2F.

Upgrade to GoAhead WebServer 2.1.8 or a newer release.

• http://aluigi.altervista.org/adv/goahead-adv3.txt
• http://www.kb.cert.org/vuls/id/975041

---

Updated on 2015-03-25