Vulnerabilities > CVE-2001-0452 - Path Disclosure vulnerability in BRS WebWeaver FTP Root

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
brs
exploit available
NVD
Published: 2001-06-27
Updated: 2008-09-05

Summary

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command.

Vulnerable Configurations

Part Description Count
Application
Brs
7

Exploit-Db

descriptionBRS WebWeaver 0.x FTP Root Path Disclosure Vulnerability. CVE-2001-0452. Remote exploit for windows platform
idEDB-ID:20819
last seen2016-02-02
modified2001-04-28
published2001-04-28
reporterjoetesta
sourcehttps://www.exploit-db.com/download/20819/
titleBRS WebWeaver 0.x FTP Root Path Disclosure Vulnerability

References