99 matches found
cfingerd 1.4.11.4.21.4.3 Utilities - Local Buffer Overflow (1)
cfingerd 1.4.11.4.21.4.3 Utilities - Local Buffer Overflow 1 source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in...
cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (1)
source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in cfingerd makes it possible for a local user to gain elevated...
[SECURITY] [DSA-048-1] remote cfingerd exploit
Package : cfingerd Problem type : remote printf format attack Debian-specific: no Megyer Laszlo report on Bugtraq that the cfingerd Debian as distributed with Debian GNU/Linux 2.2 was not careful in its logging code. By combining this with an off-by-one error in the code that copied the username...
cfingerd < 1.4.4 Multiple Vulnerabilities
The version of cfingerd running on the remote host has multiple vulnerabilities, including : - A local buffer overflow in the GECOS field, which can be used to escalate privileges. - A format string vulnerability, triggered by a malformed ident reply. This can be used to execute arbitrary code. -...
cfingerd Version Detection
Nessus was able to detect the version of cfingerd running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10651; scriptversion "1.13"; scriptnameenglish:"cfingerd Version Detection"; scriptsummaryenglish:"cfingerd version"; scriptsetattribute...
cfingerd 1.4 - Format String (2)
cfingerd 1.4 - Format String 2 // source: https://www.securityfocus.com/bid/2576/info A format string bug in the logging facility of the cfingerd "Configurable Finger Daemon" allows remote users to attain root privileges and execute arbitrary code. cfingerd queries and logs the remote username of...
cfingerd 1.4 - Format String (2)
// source: https://www.securityfocus.com/bid/2576/info A format string bug in the logging facility of the cfingerd "Configurable Finger Daemon" allows remote users to attain root privileges and execute arbitrary code. cfingerd queries and logs the remote username of users of the service. If an...
Серьезная дырка в cfingerd (format string)
Уязвимость форматной строки...
CFINGERD remote vulnerability
Hi Following the recent habits, I break the advisory into 4 parts: OVERVIEW: --------- There is a critical bug in cfingerd daemon = 1.4.3, a classic format bug that makes possible to acquire full control over the remote machine if it runs the cfingerd program, the configurable and secure finger...
cfingerd 1.4 - Format String (1)
cfingerd 1.4 - Format String 1 source: https://www.securityfocus.com/bid/2576/info A format string bug in the logging facility of the cfingerd "Configurable Finger Daemon" allows remote users to attain root privileges and execute arbitrary code. cfingerd queries and logs the remote username of...
cfingerd 1.4 - Format String (1)
source: https://www.securityfocus.com/bid/2576/info A format string bug in the logging facility of the cfingerd "Configurable Finger Daemon" allows remote users to attain root privileges and execute arbitrary code. cfingerd queries and logs the remote username of users of the service. If an...
CVE-1999-0813
Cfingerd with ALLOWEXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges...
CVE-1999-0813
Cfingerd (with ALLOW_EXECUTION enabled) is vulnerable: it does not properly drop privileges when executing a program on behalf of a user, allowing local users to gain root privileges. Affected component: Cfingerd; underlying cause is improper privilege handling during exec. Exploitation details a...
CVE-1999-0813: Undefined Security Weakness
Cfingerd with ALLOWEXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges...
CVE-1999-0243
CVE-1999-0243 affects cfingerd on Linux (notably cfingerd versions older than 1.4.4). Public docs describe multiple local vulnerabilities, including a local buffer overflow in the GECOS field and a format-string vulnerability triggered by a malformed ident reply, both enabling potential privilege...
CVE-1999-0243
Linux cfingerd could be exploited to gain root access...
CVE-1999-0243: Undefined Security Weakness
Linux cfingerd could be exploited to gain root access...
CVE-1999-0259
cfingerd lists all users on a system via search.@target...
CVE-1999-0708
CVE-1999-0708 describes a local buffer overflow in cfingerd's GECOS field that allows a local user to gain root privileges. The vulnerability affects cfingerd prior to version 1.4.4 (as reflected in multiple scanners and advisories), with the overflow enabling privilege escalation without requiri...