CVE-2001-0452

Опубликовано: 27 июн. 2001

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command.

Ссылки

http://members.nbci.com/_XMCM/BSoutham/WebWeaver/WebWeaverHistory.html
http://www.securityfocus.com/archive/1/180506
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2676
Exploit
Vendor Advisory
http://members.nbci.com/_XMCM/BSoutham/WebWeaver/WebWeaverHistory.html
http://www.securityfocus.com/archive/1/180506
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2676
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:brs:webweaver:0.49_beta:*:*:*:*:*:*:*

cpe:2.3:a:brs:webweaver:0.50_beta:*:*:*:*:*:*:*

cpe:2.3:a:brs:webweaver:0.51_beta:*:*:*:*:*:*:*

cpe:2.3:a:brs:webweaver:0.52_beta:*:*:*:*:*:*:*

cpe:2.3:a:brs:webweaver:0.60_beta:*:*:*:*:*:*:*

cpe:2.3:a:brs:webweaver:0.61_beta:*:*:*:*:*:*:*

cpe:2.3:a:brs:webweaver:0.62_beta:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03447

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-49cf-r7gw-pv88

github

почти 4 года назад