Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories.
http://www.iss.net/security_center/static/9884.php
http://freecode.com/projects/embedthis-goahead-webserver/releases/343539