CVE-2000-0639

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-06-11 · updated 2026-06-16

Description

The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary commands by using bbd to upload a file whose extension will cause it to be executed as a CGI script by the web server.

Affected products

Sean Macguire Big Brother: 1.0, 1.1, 1.2, 1.3, 1.3b, 1.4 (+6)

References

http://archives.neohapsis.com/archives/bugtraq/2000-07/0171.html
http://www.osvdb.org/1472
http://www.securityfocus.com/bid/1494
https://exchange.xforce.ibmcloud.com/vulnerabilities/5103
http://archives.neohapsis.com/archives/bugtraq/2000-07/0171.html
http://www.osvdb.org/1472
http://www.securityfocus.com/bid/1494
https://exchange.xforce.ibmcloud.com/vulnerabilities/5103

Get alerted when CVE-2000-0639 or the next vulnerability affects your stack