67 matches found
BRS Webweaver 1.0 - Error Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/8037/info BRS WebWeaver is prone to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, BRS WebWeaver includes user requests when generating error pages. Exploitation could permit a...
CVE-2003-0409
Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP 1 POST or 2 HEAD request...
CVE-2003-0409
CVE-2003-0409 affects BRS WebWeaver (versions 1.04 and earlier). The vulnerability is a buffer overflow triggered by excessively long HTTP POST or HEAD requests, allowing remote attackers to cause a denial of service (crash) and potentially execute arbitrary code. The connected documents (NVD/NVD...
WebWeaver buffer overflow
Buffer overflow on oversized POST or HEAD request...
BRS Webweaver 1.0 4 - POST HEAD Denial of Service
BRS Webweaver 1.0 4 - POST HEAD Denial of Service source: https://www.securityfocus.com/bid/7695/info When WebWeaver receives unusually long POST or HEAD requests, a denial of service condition may result. Restarting WebWeaver will allow normal operation to resume. This vulnerability was reported...
BRS WebWeaver: POST and HEAD Overflaws
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver: POST and HEAD Overflaws product: BRS WebWeaver v1.04 and prior i guess vendor: www.brswebweaver.com risk: high date: 05/25/2k3 tested platform: Windows 98 Second Edition discovered by: euronymous /F0KP advisory urls:...
BRS Webweaver 1.0 4 - POST / HEAD Denial of Service
source: https://www.securityfocus.com/bid/7695/info When WebWeaver receives unusually long POST or HEAD requests, a denial of service condition may result. Restarting WebWeaver will allow normal operation to resume. This vulnerability was reported for WebWeaver 1.04. Earlier versions may also be...
WebWeaver FTP Aborted RETR Command Remote DoS
The remote WebWeaver FTP server can be disabled remotely by requesting a non-existing file-name. An attacker may use this flaw to prevent this FTP server from executing properly. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11584; scriptbugtraqid7425;...
BRS WebWeaver: Ftpd Lockdown via RETR cmd
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver: Ftpd Lockdown via RETR cmd product: BRS WebWeaver 1.04 and prior vendor: http://www.brswebweaver.com risk: high date: 04/23/2k3 tested platform: Windows 98 Second Edition discovered by: euronymous /F0KP advisory urls:...
BRS WebWeaver: full disclosure
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver: full disclosure product: BRS WebWeaver 1.03 vendor: http://www.brswebweaver.com risk: high date: 31/03/2k3 tested platform: Windows 98 Second Edition discovered by: euronymous /F0KP advisory urls:...
CVE-2002-1546
BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence...
CVE-2002-1546
The CVE-2002-1546 issue affects BRS WebWeaver Web Server 1.01 and allows remote attackers to bypass password protections for files and directories by sending an HTTP request that includes a "/./" sequence. This is a path traversal-like bypass vulnerability. According to the source data, the vulne...
CVE-2002-1546
BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence...
BRS WebWeaver HTTP Server DDP vulnerability
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver HTTP Server DDP vulnerability product: BRS WebWeaver 1.01, 1.03 HTTP Server vendor: http://www.bsoutham.org/WebWeaver/ risk: high date: 01/14/2k3 discovered by: euronymous /F0KP /R00tC0de advisory urls:...
BRS WebWeaver FTP Server vulnerabilities
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver FTP Server vulnerabilities product: BRS WebWeaver 1.01 FTP Server vendor: http://www.bsoutham.org/WebWeaver/ risk: high date: 01/10/2k3 discovered by: euronymous /F0KP /R00tC0de advisory urls: http://f0kp.iplus.ru/bz/012.en.t...
BRS Webweaver 1.0 1 - MKDir Directory Traversal
source: https://www.securityfocus.com/bid/6585/info WebWeaver's FTP component has a flaw which can permit a remote user to create directories outside the FTP root. By executing the mkdir command on an ftp server with dot-dot-slash ..\ directory traversal notation, an attacker can create a directo...
File protection bypass in BRS WebWeaver
URL like http://host/./secret/ allows access to password protected files...
[SecurityOffice] BRS WebWeaver Web Server v1.01 Protected File Access Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- BRS WebWeaver Web Server v1.01 Protected File Access Vulnerability -- - -- Type File Disclosure - -- Release Date October 24, 2002 - -- Product / Vendor BRS WebWeaver is a small, fast HTTP and FTP Server for Win9x/WinNT. I've done a little testing...