Lucene search

K
exploitdbIain WadeEDB-ID:19745
HistoryFeb 04, 2000 - 12:00 a.m.

Daniel Beckham The Finger Server 0.82 Beta - Pipe

2000-02-0400:00:00
Iain Wade
www.exploit-db.com
33

AI Score

7.4

Confidence

Low

source: https://www.securityfocus.com/bid/974/info

'The Finger Server' is a perl script for providing .plan-like functionality through a website. Due to insufficient input checking it is possible for remote unauthenticated users to execute shell commands on the server which will run with the priveleges of the webserver. 

A request like:
http ://target/finger.cgi?action=archives&cmd=specific
&filename=99.10.28.15.23.username.|<shell command>|
(split for readability)
will cause the server to execute whatever command is specified. 

AI Score

7.4

Confidence

Low

Related for EDB-ID:19745