BRSwebweaver.txt

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver: Anonymous Surfing product: BRS WebWeaver 1.06 vendor: http://www.brswebweaver.com risk: high date: 09/24/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/027en http://f0kp.iplus.ru/bz/027ru contact...

CVE-2003-0409

Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP 1 POST or 2 HEAD request...

BRS Webweaver 1.0 - Error Page Cross-Site Scripting

BRS Webweaver 1.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/8037/info BRS WebWeaver is prone to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, BRS WebWeaver includes user requests when...

BRS Webweaver 1.0 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/8037/info BRS WebWeaver is prone to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, BRS WebWeaver includes user requests when generating error pages. Exploitation could permit a...

CVE-2003-0409

Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP 1 POST or 2 HEAD request...

CVE-2003-0409

CVE-2003-0409 affects BRS WebWeaver (versions 1.04 and earlier). The vulnerability is a buffer overflow triggered by excessively long HTTP POST or HEAD requests, allowing remote attackers to cause a denial of service (crash) and potentially execute arbitrary code. The connected documents (NVD/NVD...

CVE-2003-0409: Undefined Security Weakness

Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP 1 POST or 2 HEAD request...

WebWeaver buffer overflow

Buffer overflow on oversized POST or HEAD request...

BRS Webweaver 1.0 4 - POST HEAD Denial of Service

BRS Webweaver 1.0 4 - POST HEAD Denial of Service source: https://www.securityfocus.com/bid/7695/info When WebWeaver receives unusually long POST or HEAD requests, a denial of service condition may result. Restarting WebWeaver will allow normal operation to resume. This vulnerability was reported...

BRS WebWeaver: POST and HEAD Overflaws

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver: POST and HEAD Overflaws product: BRS WebWeaver v1.04 and prior i guess vendor: www.brswebweaver.com risk: high date: 05/25/2k3 tested platform: Windows 98 Second Edition discovered by: euronymous /F0KP advisory urls:...

BRS Webweaver 1.0 4 - POST / HEAD Denial of Service

source: https://www.securityfocus.com/bid/7695/info When WebWeaver receives unusually long POST or HEAD requests, a denial of service condition may result. Restarting WebWeaver will allow normal operation to resume. This vulnerability was reported for WebWeaver 1.04. Earlier versions may also be...

WebWeaver FTP Aborted RETR Command Remote DoS

The remote WebWeaver FTP server can be disabled remotely by requesting a non-existing file-name. An attacker may use this flaw to prevent this FTP server from executing properly. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11584; scriptbugtraqid7425;...

BRS WebWeaver: Ftpd Lockdown via RETR cmd

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver: Ftpd Lockdown via RETR cmd product: BRS WebWeaver 1.04 and prior vendor: http://www.brswebweaver.com risk: high date: 04/23/2k3 tested platform: Windows 98 Second Edition discovered by: euronymous /F0KP advisory urls:...

BRS WebWeaver: full disclosure

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver: full disclosure product: BRS WebWeaver 1.03 vendor: http://www.brswebweaver.com risk: high date: 31/03/2k3 tested platform: Windows 98 Second Edition discovered by: euronymous /F0KP advisory urls:...

CVE-2002-1546

BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence...

CVE-2002-1546

The CVE-2002-1546 issue affects BRS WebWeaver Web Server 1.01 and allows remote attackers to bypass password protections for files and directories by sending an HTTP request that includes a "/./" sequence. This is a path traversal-like bypass vulnerability. According to the source data, the vulne...

CVE-2002-1546

BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence...

CVE-2002-1546: Undefined Security Weakness

BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence...

BRS WebWeaver HTTP Server DDP vulnerability

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver HTTP Server DDP vulnerability product: BRS WebWeaver 1.01, 1.03 HTTP Server vendor: http://www.bsoutham.org/WebWeaver/ risk: high date: 01/14/2k3 discovered by: euronymous /F0KP /R00tC0de advisory urls:...

BRS WebWeaver FTP Server vulnerabilities

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver FTP Server vulnerabilities product: BRS WebWeaver 1.01 FTP Server vendor: http://www.bsoutham.org/WebWeaver/ risk: high date: 01/10/2k3 discovered by: euronymous /F0KP /R00tC0de advisory urls: http://f0kp.iplus.ru/bz/012.en.t...