AOH :: Web :: Adminware, Control Panels :: BB1.HTM

Big Brother 1.09b/c as CGI retrieve arbitrary files

Vulnerability

     web/bb-hist.sh

Affected

    Systems using Big Brother 1.09b/c as CGI

Description

    Sean  MacGuire  posted  following.   This  notice concerns the Big
    Brother System and Network Monitor.  Exploiting the problem  could
    allow  the  partial  display  of  local  files  provided  they are
    readable by your  web server, and  text-based.  This  was found by
    Michael Smith.

Solution

    Please pick up a new version of the bb-hist.sh file at:

        http://maclawran.ca/bb-dnld/bb-hist.sh

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2009 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.