The GoAhead Webserver is an open standard web server compliant with all necessary standards to be an effective embedded Web server. The product suffers from a very serious vulnerability that allows a malicious attacker to launch a Denial-of-Service against the machine and make it stop serving legitimate users.
Credit:
The information has been provided by neme-dhc.
Vulnerable systems:
GoAhead Webserver version 2.0
GoAhead Webserver version 2.1
Example:
To test this vulnerability, send the following request:
GET /aux
Then hit return twice. It looks like everything is normal, but trying to visit any page on the webserver would prove impossible.
