Vulnerabilities > CVE-2000-0638 - Unspecified vulnerability in Sean Macguire BIG Brother
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter.
Vulnerable Configurations
Exploit-Db
description | Sean MacGuire Big Brother 1.x Directory Traversal Vulnerability. CVE-2000-0638. Remote exploit for cgi platform |
id | EDB-ID:20068 |
last seen | 2016-02-02 |
modified | 2000-07-11 |
published | 2000-07-11 |
reporter | Eric Hines |
source | https://www.exploit-db.com/download/20068/ |
title | Sean MacGuire Big Brother 1.x - Directory Traversal Vulnerability |
Nessus
NASL family | CGI abuses |
NASL id | BB-HOSTSVC.NASL |
description | The version of Big Brother running on the remote host is affected by a directory traversal vulnerability in the |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 10460 |
published | 2000-07-12 |
reporter | This script is Copyright (C) 2000-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/10460 |
title | Big Brother bb-hostsvc.sh 'HOSTSVC' Parameter Traversal Arbitrary File Access |
code |
|