BRS Webweaver 1.0 1 - MKDir Directory Traversal

source: https://www.securityfocus.com/bid/6585/info WebWeaver's FTP component has a flaw which can permit a remote user to create directories outside the FTP root. By executing the mkdir command on an ftp server with dot-dot-slash ..\ directory traversal notation, an attacker can create a directo...

File protection bypass in BRS WebWeaver

URL like http://host/./secret/ allows access to password protected files...

[SecurityOffice] BRS WebWeaver Web Server v1.01 Protected File Access Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- BRS WebWeaver Web Server v1.01 Protected File Access Vulnerability -- - -- Type File Disclosure - -- Release Date October 24, 2002 - -- Product / Vendor BRS WebWeaver is a small, fast HTTP and FTP Server for Win9x/WinNT. I've done a little testing...

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0453

Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. dot dot attack in the 1 syshelp, 2 sysimages, or 3 scripts directories...

CVE-2001-0453

Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. dot dot attack in the 1 syshelp, 2 sysimages, or 3 scripts directories...

CVE-2001-0452

CVE-2001-0452 affects the BRS WebWeaver FTP server prior to 0.64 Beta. The vulnerability allows a remote attacker to obtain the real pathname of the server by issuing a sequence: first a problematic CD * command, followed by an ls. The available documents confirm the affected product and the exac...

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0453

The CVE-2001-0453 entry concerns the BRS WebWeaver HTTP server, where a directory traversal flaw allows remote attackers to read arbitrary files. The vulnerability is triggered by a .. (dot dot) path traversal in one of three directories (syshelp, sysimages, or scripts). The provided documents co...

CVE-2001-0453: Undefined Security Weakness

Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. dot dot attack in the 1 syshelp, 2 sysimages, or 3 scripts directories...

CVE-2001-0452: Undefined Security Weakness

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

Vulnerabilities in BRS WebWeaver

----- Begin Hush Signed Message from [email protected] ----- Vulnerabilities in BRS WebWeaver Overview BRS WebWeaver v0.63 is a combined ftp and web server available from http://bsoutham.home.dhs.org. Vulnerabilities exist in the web server which allow remote users to break out of the web roo...

BRS Webweaver 0.x - FTP Root Full Path Disclosure

source: https://www.securityfocus.com/bid/2676/info BRS WebWeaver is an ftpd and webserver from Blaine Southam. WebWeaver's FTP component has a flaw which can permit a remote user to learn the physcial path to the FTP service's root directory. By submitting the FTP command CD argumented by an...

BRS Webweaver 0.x - FTP Root Full Path Disclosure

BRS Webweaver 0.x - FTP Root Full Path Disclosure source: https://www.securityfocus.com/bid/2676/info BRS WebWeaver is an ftpd and webserver from Blaine Southam. WebWeaver's FTP component has a flaw which can permit a remote user to learn the physcial path to the FTP service's root directory. By...