PT-2000-1573 · Quadrant · Big Brother

Published 2000-06-11 · Updated 2017-10-10 · CVE-2000-0639

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Big Brother versions 1.4h2 and earlier

Description The default configuration does not include proper access restrictions, allowing remote attackers to execute arbitrary commands by uploading a file that will be executed as a CGI script by the web server.

Recommendations For Big Brother versions 1.4h2 and earlier, consider configuring proper access restrictions to prevent remote attackers from uploading executable files. As a temporary workaround, restrict access to the bbd upload functionality until a proper configuration can be implemented.

Exploit

Fix

Related Identifiers

CVE-2000-0639

Affected Products

Big Brother

References · 6

• 🔥 http://securityfocus.com/bid/1494 · Exploit
• 🔥 https://exploit-db.com/exploits/20092 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0171.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0639 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5103 · Note
• http://osvdb.org/1472 · Note