CVE-2001-0647

MEDIUM 5.0CVE-2001-0647 · Published 06/08/2001 · updated 16/06/2026

In short

CVE-2001-0647 is a MEDIUM (CVSS 5.0) vulnerability affecting orange web server (orange software).
Chance of exploitation in the next 30 days (EPSS): 5.2%, higher than 92.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
orange web server orange_software	`= 2.1`	No fix yet

Description

Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version.

References

securityfocus.com/archive/1/165658
securityfocus.com/bid/2432 · Exploit

More vulnerabilities in orange web server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free