Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-0452. PoCs published by joetesta.
AI-analyzed exploit summary This exploit demonstrates an information leakage vulnerability in BRS WebWeaver's FTP server. By issuing the 'CD *' command, an attacker can retrieve the physical path of the FTP root directory, which is disclosed in an error message.
Description
BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command.
Exploits (1)
This exploit demonstrates an information leakage vulnerability in BRS WebWeaver's FTP server. By issuing the 'CD *' command, an attacker can retrieve the physical path of the FTP root directory, which is disclosed in an error message.