CVE-1999-0259

CVE-1999-0259 describes an information-disclosure vulnerability in cfingerd where a remote attacker can list system users by issuing a finger search (finger search.*@target). The affected component is cfingerd; the underlying root cause is a bug in the search handling that exposes user lists. Doc...

CVE-1999-0708: Undefined Security Weakness

Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field...

CVE-1999-0259: Undefined Security Weakness

cfingerd lists all users on a system via search.@target...

cfingerd_bof.txt

-----BEGIN PGP SIGNED MESSAGE----- Babcia Padlina Ltd. Security Advisory BP-9909:00 Synopsis: Cfingerd is vulnerable to local buffer overflow attack. Vulnerable versions: Cfingerd 1.4.2 and earlier installed on systems which doesn't limit gecos length. Description: By setting carefully designed...

cfingerd_bug.txt

Subject: Severe bug in cfingerd before 1.4.0 To: [email protected] Severe bug in cfingerd before 1.ems Content-Type: text/plain; charset=us-ascii PGP Signature Status: unknown Signer: Unknown, Key ID xAE8F7CF5 Signed: 8/10/99 11:34:37 AM Verified: 9/21/99 7:41:23 PM BEGIN PGP VERIFIED...

CVE-1999-0708

Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field...

remote_bof_cfingerd.txt

Subject: cfingerd 1.3.2 To: [email protected] Hi, there is a remote buffer over flow in cfingerd 1.3.2 in searchfake: int searchfakechar username char parsed80; bzeroparsed, 80; sscanfusername, "%^..%^\r\n\r\n", parsed; ... called from processusername, that is called from main: int mainint arg...

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow

// source: https://www.securityfocus.com/bid/651/info Under systems that allow the user to change his GECOS field from the password file and do not limit its length cfingerd is vulnerable to a local root or nobody buffer overflow. By setting a carefully designed GECOS field it is possible to...

cfingerd.txt

Date: Thu, 23 Jul 1998 23:48:21 -0500 From: John Goerzen Subject: CFINGERD root security hole SUMMARY ------- I have found out that cfingerd 1.3.2 contains a security hole that could lead to easy root compromise for any user that has an account on the local machine, but only if ALLOWEXECUTION is...

[SECURITY] New versions of cfingerd fixes root exploit

We have received a report that the all versions of cfingerd prior to 1.4.0 and 1.3.2-18.1 are vulnerable to a root exploit - as posted on bugtraq. We recommend you upgrade your cfingerd package immediately or disable ALLOWEXECUTION. The latter is turned off in the default Debian configuration. wg...

[SECURITY] New versions of cfingerd fixes root exploit

We have received a report that the all versions of cfingerd prior to 1.4.0 and 1.3.2-18.1 are vulnerable to a root exploit - as posted on bugtraq. We recommend you upgrade your cfingerd package immediately or disable ALLOWEXECUTION. The latter is turned off in the default Debian configuration. wg...

CVE-1999-0813

Cfingerd with ALLOWEXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges...

PT-1999-1368 · Cfingerd · Cfingerd

Name of the Vulnerable Software and Affected Versions: Cfingerd affected versions not specified Description: The issue concerns Cfingerd when ALLOW EXECUTION is enabled. It fails to properly drop privileges when executing a program on behalf of the user. This allows local users to gain root...

cfingerd Wildcard Argument Information Disclosure

The remote host is running 'cfingerd', a finger daemon. There is a bug in the remote cfinger daemon that allows a remote attacker to get the lists of the users of this system when issuing the command : finger search.@victim This information can be used by a remote attacker to mount further attack...

CVE-1999-0243

Linux cfingerd could be exploited to gain root access...

[SECURITY] New versions of cfingerd fixes root compromise

We have received a report that a user can execute arbitrary commands from a .plan or .project file. While the option that would allow this is disabled by default the system is vulnerable if the system admin had this option enabled. We recommend you upgrade your cfingerd package immediately. dpkg ...

[SECURITY] New versions of cfingerd fixes root compromise

We have received a report that a user can execute arbitrary commands from a .plan or .project file. While the option that would allow this is disabled by default the system is vulnerable if the system admin had this option enabled. We recommend you upgrade your cfingerd package immediately. dpkg ...

CVE-1999-0259

cfingerd lists all users on a system via search.@target...

PT-1997-1113 · Cfingerd · Cfingerd

Name of the Vulnerable Software and Affected Versions: cfingerd affected versions not specified Description: The issue allows cfingerd to list all users on a system via search. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...