Lucene search

[email protected]CVE-2001-0453

HistoryJun 27, 2001 - 4:00 a.m.

CVE-2001-0453

2001-06-2704:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

http server

unauthorized access

brs webweaver

directory traversal

cve-2001-0453

7.5 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

64.8%

JSON

Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a … (dot dot) attack in the (1) syshelp, (2) sysimages, or (3) scripts directories.

CPENameOperatorVersion
brs:webweaverbrs webweavereq0.50_beta
brs:webweaverbrs webweavereq0.60_beta
brs:webweaverbrs webweavereq0.52_beta
brs:webweaverbrs webweavereq0.51_beta
brs:webweaverbrs webweavereq0.62_beta
brs:webweaverbrs webweavereq0.61_beta
brs:webweaverbrs webweavereq0.49_beta

CPE	Name	Operator	Version
brs:webweaver	brs webweaver	eq	0.50_beta
brs:webweaver	brs webweaver	eq	0.60_beta
brs:webweaver	brs webweaver	eq	0.52_beta
brs:webweaver	brs webweaver	eq	0.51_beta
brs:webweaver	brs webweaver	eq	0.62_beta
brs:webweaver	brs webweaver	eq	0.61_beta
brs:webweaver	brs webweaver	eq	0.49_beta

References

archives.neohapsis.com/archives/bugtraq/2001-04/0519.html

members.nbci.com/_XMCM/BSoutham/WebWeaver/WebWeaverHistory.html

www.securityfocus.com/bid/2675

7.5 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

64.8%

JSON