https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2003-1165.htmlhttps://patchthecve.com/cve/CVE-2003-1165.htmlTue, 16 Jun 2026 22:03:38 +0000MEDIUM 5.0: Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with a long User-Agent header.https://patchthecve.com/cve/CVE-2003-0409.htmlhttps://patchthecve.com/cve/CVE-2003-0409.htmlTue, 16 Jun 2026 22:02:09 +0000HIGH 10.0: Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP (1) POST or (2) HEAD request.https://patchthecve.com/cve/CVE-2002-1546.htmlhttps://patchthecve.com/cve/CVE-2002-1546.htmlTue, 16 Jun 2026 21:59:31 +0000HIGH 7.5: BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.https://patchthecve.com/cve/CVE-2001-0453.htmlhttps://patchthecve.com/cve/CVE-2001-0453.htmlTue, 16 Jun 2026 21:54:20 +0000MEDIUM 5.0: Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the (1) syshelp, (2) sysimages, or (3) scripts directories.https://patchthecve.com/cve/CVE-2001-0452.htmlhttps://patchthecve.com/cve/CVE-2001-0452.htmlTue, 16 Jun 2026 21:54:20 +0000MEDIUM 5.0: BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command.