PT-2000-1888 · Dessert · Big Brother System/Network Monitor

Published 2000-12-19 · Updated 2017-10-10 · CVE-2000-0978

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Big Brother System and Network Monitor versions prior to 1.5c2

Description The issue allows remote attackers to execute arbitrary commands. This is achieved via the "&" shell metacharacter in the bbd server.

Recommendations For versions prior to 1.5c2, update to version 1.5c2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2000-0978

Affected Products

Big Brother System/Network Monitor

References · 4

• http://archives.neohapsis.com/archives/bugtraq/2000-10/0162.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0978 · Security Note
• http://securityfocus.com/bid/1779 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5719 · Note