Sean MacGuire Big Brother 1.x - Directory Traversal
| EKU-ID: 25643 | CVE: CVE-2000-0638;OSVDB-359 | OSVDB-ID: |
| Author: Eric Hines | Published: 2000-07-11 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 25643 | CVE: CVE-2000-0638;OSVDB-359 | OSVDB-ID: |
| Author: Eric Hines | Published: 2000-07-11 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/1455/info Versions 1.4H and prior of BB4 Big Brother are susceptible to a directory traversal vulnerability which would allow a remote user to view the contents of any directory or file on the system. Executing a GET request for: http://target/cgi-bin/bb-hostsvc.sh?HOSTSVC=/../../directory will display the contents of the specified directory.