NetSight
IP …
medium5.0Public exploit code

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command.

Affected products

VendorProductAffected versions
BrsWebweaver
Versions 0.49_beta, 0.50_beta, 0.51_beta, 0.52_beta, 0.60_beta, 0.61_beta

References