CVE-2002-0424

CVE-2002-0424 affects efingerd 1.61 and earlier. When configured without the -u option, efingerd executes user-owned .efingerd files as the efingerd user (typically "nobody"), allowing a local user to gain privileges by modifying their own .efingerd file and invoking finger. The connected documen...