Lucene search
HistoryJul 21, 1999 - 4:00 a.m.
CVE-1999-1165
cve-1999-1165
gnu fingerd 1.37
privilege drop issue
root access
arbitrary file access
nvd.
6.7 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gnu:fingerd | gnu fingerd | eq | 1.37 |
Related
openvas
openvas
FreeBSD Ports: gnu-finger
2008-09-04 00:00:00
nessus
nessus
FreeBSD : GNU finger vulnerability (610bc692-a2ad-11dc-900c-000bcdc1757a)
2007-12-07 00:00:00
freebsd
freebsd
GNU finger vulnerability
1999-07-21 00:00:00
6.7 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-1999-1165