Локальные дыры в cfingerd (buffer overflow, format string)

Переполнение буфера и ошибка форматной строки при разборе файла конфигурации пользователя...

CVE-2001-0735

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...

DEBIAN-CVE-2001-0735

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...

CVE-2001-0735

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...

CVE-2001-0735

CVE-2001-0735 affects cfingerd 1.4.3 and earlier. The root cause is a buffer overflow in the code that reads configuration files when ALLOW_LINE_PARSING is enabled, allowing local users to execute arbitrary code via a long line in the .nofinger file. The vulnerability is local, requires no authen...

CVE-2001-0735

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...

CVE-2001-0735

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...

CVE-2001-0609

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function...

CVE-2001-0609

CVE-2001-0609 affects Infodrom cfingerd 1.4.3 and earlier. A format string vulnerability in the ident reply that is passed to the syslog function enables a remote attacker to gain additional privileges. Several connected sources corroborate that cfingerd’s logging/ident handling allows privilege ...

CVE-2001-0609

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function...

PT-2001-1807 · Infodrom · Cfingerd

Name of the Vulnerable Software and Affected Versions: Infodrom cfingerd versions 1.4.3 and earlier Description: A format string issue allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function. This can be exploited by sending a...

[SECURITY] [DSA-066-1] cfingerd remote exploit

Package : cfingerd Problem type : remote exploit Debian-specific: no Steven van Acker reported on bugtraq that the version of cfingerd a configurable finger daemon as distributed in Debian GNU/Linux 2.2 suffers from two problems: 1. The code that reads configuration files files in which $ command...

cfingerd 1.4.11.4.21.4.3 Utilities - Local Buffer Overflow (2)

cfingerd 1.4.11.4.21.4.3 Utilities - Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in...

cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in cfingerd makes it possible for a local user to gain elevated...

cfingerd 1.4.11.4.21.4.3 Utilities - Local Buffer Overflow (3)

cfingerd 1.4.11.4.21.4.3 Utilities - Local Buffer Overflow 3 // source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in...

cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (3)

// source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in cfingerd makes it possible for a local user to gain elevated...

cfingerd local vulnerability (possibly root)

Hi, I sent this mail 2 weeks ago, but still didn't receive a reply. Neither did the cfingerd authors change anything on their site http://www.infodrom.ffis.de/projects/cfingerd/. So I will do my duty and report this on bugtraq. I didn't check versions prior to cfingerd 1.4.3, but I suppose they a...

cfingerd 1.4.11.4.21.4.3 Utilities - Local Buffer Overflow (1)

cfingerd 1.4.11.4.21.4.3 Utilities - Local Buffer Overflow 1 source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in...

cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (1)

source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in cfingerd makes it possible for a local user to gain elevated...

[SECURITY] [DSA-048-1] remote cfingerd exploit

Package : cfingerd Problem type : remote printf format attack Debian-specific: no Megyer Laszlo report on Bugtraq that the cfingerd Debian as distributed with Debian GNU/Linux 2.2 was not careful in its logging code. By combining this with an off-by-one error in the code that copied the username...