PT-2000-1573 · Quadrant · Big Brother

Publicado 2000-06-11 · Atualizado 2017-10-10 · CVE-2000-0639

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Big Brother versions 1.4h2 and earlier

Description The default configuration does not include proper access restrictions, allowing remote attackers to execute arbitrary commands by uploading a file that will be executed as a CGI script by the web server.

Recommendations For Big Brother versions 1.4h2 and earlier, consider configuring proper access restrictions to prevent remote attackers from uploading executable files. As a temporary workaround, restrict access to the bbd upload functionality until a proper configuration can be implemented.

Exploit

Correção

Identificadores relacionados

CVE-2000-0639

Produtos afetados

Big Brother

Referências · 6

• 🔥 http://securityfocus.com/bid/1494 · Exploit
• 🔥 https://exploit-db.com/exploits/20092 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5103 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0171.html · Aviso do Fabricante
• http://osvdb.org/1472 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0639 · Nota de Segurança