NetSight
critical10.0Public exploit code

CVE-2000-0638

bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a ..

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter.

Affected products

VendorProductAffected versions
Sean MacguireBig Brother
Versions 1.0, 1.1, 1.2, 1.3, 1.3b, 1.4

References