CVE-2001-0452

Published: Jun 27, 2001Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command.

Affected (7)

Products: Brs: Webweaver

Brs

1 product

Webweaver

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Brs Webweaver	Version 0.49_beta
Brs Webweaver	Version 0.50_beta
Brs Webweaver	Version 0.51_beta
Brs Webweaver	Version 0.52_beta
Brs Webweaver	Version 0.60_beta
Brs Webweaver	Version 0.61_beta
Brs Webweaver	Version 0.62_beta