CVE-2000-1177

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-01-09 · updated 2026-06-16

Description

bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifying the target file in the HISTFILE parameter.

Affected products

Bb4 Big Brother Network Monitor: through 1.5d2

References

http://archives.neohapsis.com/archives/bugtraq/2000-11/0284.html
http://bb4.com/incident.nov21
http://www.securityfocus.com/bid/1971
http://archives.neohapsis.com/archives/bugtraq/2000-11/0284.html
http://bb4.com/incident.nov21
http://www.securityfocus.com/bid/1971

Get alerted when CVE-2000-1177 or the next vulnerability affects your stack