CVE-2000-0638

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jul 11, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-06397.5The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to exeCVE-2000-06407.5Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides differCVE-2000-06417.5Savant web server allows remote attackers to execute arbitrary commands via a long GET request.CVE-2000-06425.0The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attacCVE-2000-06435.0Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL.CVE-2000-06445.0WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still exCVE-2000-06456.4WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the endCVE-2000-06465.0WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file CVE-2000-06475.0WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server.CVE-2000-06485.0WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFCVE-2000-06492.6IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected byCVE-2000-06502.1The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade di
CVE-2000-0638: Critical severity, CVSS 10.0 | Vulnix