Solaris in.fingerd Unused Accounts Disclosure

The remote Solaris finger daemon will return a list of accounts that have never been used when it receives the request : finger 'a b c d e f g h'@target A remote attacker could use this information to guess which operating system is running, or to mount further attacks on these accounts. C Tenabl...

CVE-1999-0152

The DG/UX finger daemon allows remote command execution through shell metacharacters...

CVE-1999-0152

The CVE-1999-0152 issue affects the DG/UX finger daemon, where remote command execution is possible via shell metacharacters. Multiple connected sources corroborate that an attacker can trigger arbitrary commands on a target system, potentially gaining a shell. Documented impact is remote executi...

CVE-1999-0152: Undefined Security Weakness

The DG/UX finger daemon allows remote command execution through shell metacharacters...

in.fingerd Pipe Input Arbitrary Command Execution

It is possible to force the remote finger daemon to execute arbitrary commands by issuing requests like : finger |commandtoexecute@target An attacker may use this bug to gain a shell on this host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10126; scriptversion...

Finger Backdoor Detection

The remote finger daemon seems to be a backdoor, as it seems to react to the request : cmdrootsh@target If a root shell has been installed as /tmp/.sh, then this finger daemon is definitely a trojan, and this system has been compromised. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-1999-0152

The DG/UX finger daemon allows remote command execution through shell metacharacters...

PT-1997-1066 · Data General · Dg/Ux

Name of the Vulnerable Software and Affected Versions: DG/UX affected versions not specified Description: The issue allows remote command execution through shell metacharacters in the DG/UX finger daemon. Recommendations: At the moment, there is no information about a newer version that contains ...