Vulnerabilities > CVE-2003-1235
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |
References
- http://archives.neohapsis.com/archives/bugtraq/2003-04/0014.html
- http://archives.neohapsis.com/archives/bugtraq/2003-04/0014.html
- http://www.iss.net/security_center/static/11686.php
- http://www.iss.net/security_center/static/11686.php
- http://www.securityfocus.com/bid/7283
- http://www.securityfocus.com/bid/7283