critical10.0Public exploit code
CVE-2000-0638
bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sean MacGuire Big Brother 1.x - Directory Traversal2000-07-11 · remote · cgi · Verified
Impact
bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sean Macguire | Big Brother | Versions 1.0, 1.1, 1.2, 1.3, 1.3b, 1.4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0146.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0147.html
- http://bb4.com/README.CHANGES
- http://www.securityfocus.com/bid/1455
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4879
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0146.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0147.html
- http://bb4.com/README.CHANGES
- http://www.securityfocus.com/bid/1455
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4879