CVE-2001-0452: Brs Webweaver

Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days.

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command.

Affected products

• Brs Webweaver: version 0.49_beta only; version 0.50_beta only; version 0.51_beta only; version 0.52_beta only; version 0.60_beta only; version 0.61_beta only; …

Published 2001-06-27. Last modified 2026-06-16.