CVE-2000-1177

bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifying the target file in the HISTFILE parameter.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

7.95% chance of exploitation in the next 30 days, 95th percentile

Published

2000-12-19

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20413

Security advisories

• http://archives.neohapsis.com/archives/bugtraq/2000-11/0284.html
• http://www.securityfocus.com/bid/1971

References

• CVE Record
• NVD entry