CVE-2000-0639 in Big Brother

Sumário

de MITRE

The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary commands by using bbd to upload a file whose extension will cause it to be executed as a CGI script by the web server.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Divulgação: 11/06/2000
• Moderação: aceite
• Entrada: VDB-15661
• CPE: pronto
• CWE: CWE-269 (confirmado)
• Exploração: Descarregar
• CVSS: 7.5 (NVD)
• EPSS: 0.09485
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2000-0639
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2000-0639
• CVE Details: https://www.cvedetails.com/cve/CVE-2000-0639/