Unrated severityNVD Advisory· Published Jun 27, 2001· Updated Apr 16, 2026
CVE-2001-0452
CVE-2001-0452
Description
BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command.
Affected products
7cpe:2.3:a:brs:webweaver:0.49_beta:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:brs:webweaver:0.49_beta:*:*:*:*:*:*:*
- cpe:2.3:a:brs:webweaver:0.50_beta:*:*:*:*:*:*:*
- cpe:2.3:a:brs:webweaver:0.51_beta:*:*:*:*:*:*:*
- cpe:2.3:a:brs:webweaver:0.52_beta:*:*:*:*:*:*:*
- cpe:2.3:a:brs:webweaver:0.60_beta:*:*:*:*:*:*:*
- cpe:2.3:a:brs:webweaver:0.61_beta:*:*:*:*:*:*:*
- cpe:2.3:a:brs:webweaver:0.62_beta:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.securityfocus.com/archive/1/180506nvdPatchVendor Advisory
- www.securityfocus.com/bid/2676nvdExploitVendor Advisory
- members.nbci.com/_XMCM/BSoutham/WebWeaver/WebWeaverHistory.htmlnvd
News mentions
0No linked articles in our index yet.