CVE-2014-9707 – Embedthis GoAhead Embedded Web Server Directory Traversal

https://notcve.org/view.php?id=CVE-2014-9707

28 Mar 2015 — EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remote attackers to conduct directory traversal attacks, cause a denial of service (heap-based buffer overflow and crash), or possibly execute arbitrary code via a crafted URI. EmbedThis GoAhead 3.0.0 hasta 3.4.1 no maneja correctamente los segmentos de rutas que comienzan con un . (punto), lo que permite a atacantes remotos realizar ataques de salto de directorio, causar una denegación de serv... • https://packetstorm.news/files/id/181142 • CWE-17: DEPRECATED: Code •