CVE-2000-0638

Big Brother <1.4h1 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0638. PoCs published by Eric Hines.

AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in BB4 Big Brother versions 1.4H and prior. By sending a crafted GET request, an attacker can traverse directories and view arbitrary files or directories on the system.

Description

bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Eric Hines · textremotecgi
https://www.exploit-db.com/exploits/20068

The exploit describes a directory traversal vulnerability in BB4 Big Brother versions 1.4H and prior. By sending a crafted GET request, an attacker can traverse directories and view arbitrary files or directories on the system.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: BB4 Big Brother <= 1.4H
No auth needed
Prerequisites: Network access to the target system · BB4 Big Brother service running on the target
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Various Sources x_refsource_confirm
http://bb4.com/README.CHANGES
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/4879
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1455
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-07/0146.html
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-07/0147.html

Scores

EPSS 0.0411
EPSS Percentile 89.5%

Details

Status published
Products (12)
sean_macguire/big_brother 1.0
sean_macguire/big_brother 1.1
sean_macguire/big_brother 1.2
sean_macguire/big_brother 1.3
sean_macguire/big_brother 1.3b
sean_macguire/big_brother 1.4
sean_macguire/big_brother 1.4g
sean_macguire/big_brother 1.4h
sean_macguire/big_brother 1.4h1
sean_macguire/big_brother 1.09b
... and 2 more
Published Jul 11, 2000
Tracked Since Feb 18, 2026