CVE-2002-1546

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0043.html
http://www.iss.net/security_center/static/10467.phpVendor Advisory
http://www.securityfocus.com/bid/6041Vendor Advisory
http://www.securityoffice.net/articles/webweaver/Exploit, Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0043.html
http://www.iss.net/security_center/static/10467.phpVendor Advisory
http://www.securityfocus.com/bid/6041Vendor Advisory
http://www.securityoffice.net/articles/webweaver/Exploit, Vendor Advisory

Timeline

Published: Mar 31, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-15475.0Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure CVE-2002-15487.2Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly r CVE-2002-15497.5Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.CVE-2002-15504.6dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files.CVE-2002-15514.6Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code.CVE-2002-15527.5Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging CVE-2002-15537.5Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishi CVE-2002-15544.6Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XT CVE-2002-15555.0Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attacke CVE-2002-15565.0Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC CVE-2002-15575.0Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a mal CVE-2002-155810.0Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be