CVE-2000-0638

Big Brother <1.4h1 - Path Traversal

Title source: llm
STIX 2.1

Description

bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Eric Hines · textremotecgi
https://www.exploit-db.com/exploits/20068

References (5)

Core 5
Core References
Various Sources x_refsource_confirm
http://bb4.com/README.CHANGES
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/4879
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1455
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-07/0146.html
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-07/0147.html

Scores

EPSS 0.0699
EPSS Percentile 91.5%

Details

Status published
Products (12)
sean_macguire/big_brother 1.0
sean_macguire/big_brother 1.1
sean_macguire/big_brother 1.2
sean_macguire/big_brother 1.3
sean_macguire/big_brother 1.3b
sean_macguire/big_brother 1.4
sean_macguire/big_brother 1.4g
sean_macguire/big_brother 1.4h
sean_macguire/big_brother 1.4h1
sean_macguire/big_brother 1.09b
... and 2 more
Published Jul 11, 2000
Tracked Since Feb 18, 2026