Vulnerability in Brs Webweaver

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command.

EPSS: 0.033 (87.3th percentile) — read the EPSS interpretation.

Affected products

  • Brs Webweaver — versions 0.49_beta, 0.50_beta, 0.51_beta
  • N/a — versions n/a

References