high7.5Public exploit code
CVE-2000-0639
The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary comm…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sean MacGuire Big Brother 1.0/1.3/1.4 - CGI File Creation2001-06-11 · local · cgi · Verified
Impact
The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary commands by using bbd to upload a file whose extension will cause it to be executed as a CGI script by the web server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sean Macguire | Big Brother | Versions 1.0, 1.1, 1.2, 1.3, 1.3b, 1.4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0171.html
- http://www.osvdb.org/1472
- http://www.securityfocus.com/bid/1494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5103
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0171.html
- http://www.osvdb.org/1472
- http://www.securityfocus.com/bid/1494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5103