CVE-2000-1177 bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifyin...
MediumCVSS 5.0
EPSS 8.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifying the target file in the HISTFILE parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bb4 big brother network monitor | <= 1.5d2 | No fix listed |
References
- 20001121 Big Brother Advisory - Fate Research Labs mailing-list patch vendor-advisory
- bb4.com
- 1971 exploit patch vdb-entry vendor-advisory