99 matches found
cfingerd < 1.4.4 Multiple Vulnerabilities
Binary data 1279.prm...
Локальные дыры в cfingerd (buffer overflow, format string)
Переполнение буфера и ошибка форматной строки при разборе файла конфигурации пользователя...
CVE-2001-0735
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...
DEBIAN-CVE-2001-0735
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...
CVE-2001-0735
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...
CVE-2001-0735
CVE-2001-0735 affects cfingerd 1.4.3 and earlier. The root cause is a buffer overflow in the code that reads configuration files when ALLOW_LINE_PARSING is enabled, allowing local users to execute arbitrary code via a long line in the .nofinger file. The vulnerability is local, requires no authen...
CVE-2001-0735
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...
CVE-2001-0735
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...
CVE-2001-0735: Undefined Security Weakness
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...
CVE-2001-0609
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function...
CVE-2001-0609
CVE-2001-0609 affects Infodrom cfingerd 1.4.3 and earlier. A format string vulnerability in the ident reply that is passed to the syslog function enables a remote attacker to gain additional privileges. Several connected sources corroborate that cfingerd’s logging/ident handling allows privilege ...
CVE-2001-0609
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function...
CVE-2001-0609: Off-by-one Error
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function...
PT-2001-1807 · Infodrom · Cfingerd
Name of the Vulnerable Software and Affected Versions: Infodrom cfingerd versions 1.4.3 and earlier Description: A format string issue allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function. This can be exploited by sending a...
[SECURITY] [DSA-066-1] cfingerd remote exploit
Package : cfingerd Problem type : remote exploit Debian-specific: no Steven van Acker reported on bugtraq that the version of cfingerd a configurable finger daemon as distributed in Debian GNU/Linux 2.2 suffers from two problems: 1. The code that reads configuration files files in which $ command...
cfingerd 1.4.11.4.21.4.3 Utilities - Local Buffer Overflow (2)
cfingerd 1.4.11.4.21.4.3 Utilities - Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in...
cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in cfingerd makes it possible for a local user to gain elevated...
cfingerd 1.4.11.4.21.4.3 Utilities - Local Buffer Overflow (3)
cfingerd 1.4.11.4.21.4.3 Utilities - Local Buffer Overflow 3 // source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in...
cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (3)
// source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in cfingerd makes it possible for a local user to gain elevated...
cfingerd local vulnerability (possibly root)
Hi, I sent this mail 2 weeks ago, but still didn't receive a reply. Neither did the cfingerd authors change anything on their site http://www.infodrom.ffis.de/projects/cfingerd/. So I will do my duty and report this on bugtraq. I didn't check versions prior to cfingerd 1.4.3, but I suppose they a...