CVEDB API

bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.042

EPSS Ranking 88.3%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2000-0638

Sean Macguire » Big Brother » Version: 1.0

cpe:2.3:a:sean_macguire:big_brother:1.0
Sean Macguire » Big Brother » Version: 1.09b

cpe:2.3:a:sean_macguire:big_brother:1.09b
Sean Macguire » Big Brother » Version: 1.09c

cpe:2.3:a:sean_macguire:big_brother:1.09c
Sean Macguire » Big Brother » Version: 1.09d

cpe:2.3:a:sean_macguire:big_brother:1.09d
Sean Macguire » Big Brother » Version: 1.1

cpe:2.3:a:sean_macguire:big_brother:1.1
Sean Macguire » Big Brother » Version: 1.2

cpe:2.3:a:sean_macguire:big_brother:1.2
Sean Macguire » Big Brother » Version: 1.3

cpe:2.3:a:sean_macguire:big_brother:1.3
Sean Macguire » Big Brother » Version: 1.3b

cpe:2.3:a:sean_macguire:big_brother:1.3b
Sean Macguire » Big Brother » Version: 1.4

cpe:2.3:a:sean_macguire:big_brother:1.4
Sean Macguire » Big Brother » Version: 1.4g

cpe:2.3:a:sean_macguire:big_brother:1.4g
Sean Macguire » Big Brother » Version: 1.4h

cpe:2.3:a:sean_macguire:big_brother:1.4h
Sean Macguire » Big Brother » Version: 1.4h1

cpe:2.3:a:sean_macguire:big_brother:1.4h1