Rule:--Sid:894--Summary:This event is generated when an attempt is made to display historical information from a Big Brother system monitor host.--Impact:Information Disclosure.--Detailed Information:Big Brother is a monitoring system used by many organisations. Itrecords both current and historical information about monitored hosts ona network.  Access to the system status is via a series of web pages andCGI scripts. Version 1.09b & 1.09c contained a bug in bb-hist.sh thatcould be made to display files accessible by the user under which theCGI script is run.--Affected Systems:--Attack Scenarios:A malicious user could use this vulnerability to gain more informationabout the Big Brother host.--Ease of Attack:Simple.--False Positives:None known.--False Negatives: None known--Corrective Action:Upgrade to a later version of Big Brother at least 1.09d--Contributors:Original rule writer unknownOriginal document author unkownSourcefire Vulnerability Research TeamNigel Houghton <nigel.houghton@sourcefire.com>--Additional References: BigBrother:http://www.quest.com/bigbrother/--