bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and user IDs by specifying the target file in the HISTFILE parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Big_brother_network_monitor | Bb4 | * | 1.5d2 (including) |