CVE-2002-2091

Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the username of a finger request...

akfingerd 0.5 Multiple Vulnerabilities

The remote finger service appears to vulnerable to a remote attack which can disrupt the service of the finger daemon. This denial of service does not affect other services that may be running on the remote computer, only the finger service can be disrupted. akfingerd version 0.5 or earlier is...

CVE-2001-1503

The finger daemon in.fingerd in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host...

fingerd-cgi.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++GOBBLES+SECURITY+RESEARCH+TEAM+INCORPORATED+++++++++++++++++ ALERT! ALERT! BERKELEY FINGER VULNERABILITY! ALERT! ALERT! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ This is NOT...

Solaris in.fingerd Unused Accounts Disclosure

The remote Solaris finger daemon will return a list of accounts that have never been used when it receives the request : finger 'a b c d e f g h'@target A remote attacker could use this information to guess which operating system is running, or to mount further attacks on these accounts. C Tenabl...

FreeBSD 4.1.1 Finger Arbitrary Remote File Access

The finger daemon running on the remote host will reveal the contents of arbitrary files when given a command similar to the following : finger /etc/passwd@target Which will return the contents of /etc/passwd. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10534;...

CVE-2000-0128

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...

CVE-2000-0128

The CVE-2000-0128 entry affects Finger Server 0.82 and is caused by input that allows shell metacharacters to be interpreted, enabling remote command execution. The vulnerability is documented with a high CVSS v2 score (AV:N/AC:L/Au:N/C:C/I:C/A:C). The provided records do not specify affected pla...

CVE-1999-0797

NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries...

CVE-1999-0797

CVE-1999-0797 involves the NIS finger service, where an attacker can cause a denial of service by issuing a high volume of finger requests, which leads to a flood of NIS queries. The connected documents reiterate the same description across Red Hat and CVE lists, with no concrete details about af...

CVE-1999-0106

Finger redirection allows finger bombs...

CVE-1999-0106

CVE-1999-0106 refers to a vulnerability in the finger service where remote finger redirection can be abused to cause a Denial of Service. Multiple connected sources corroborate: the OpenVAS/Nessus entries describe a remote finger service vulnerability that allows redirection requests (finger user...

CVE-1999-0105

CVE-1999-0105 affects the finger service. The issue allows recursive searches by using a long string of @ symbols, enabling a remote finger daemon to be abused as a relay. Nessus details show the remote finger service can accept redirect requests (e.g., finger user@host@victim), which can be used...

CVE-1999-0105

finger allows recursive searches by using a long string of @ symbols...

CVE-2000-0128

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...

CVE-1999-0198

The CVE-1999-0198 entry concerns the finger service (finger .@host) which may disclose information about user accounts on affected systems. The core issue is an information-disclosure vulnerability in the remote finger daemon, enabling an attacker to view which accounts exist or have never been u...

CVE-1999-0198

finger .@host on some systems may print information on some user accounts...

CVE-1999-0197

finger 0@host on some systems may print information on some user accounts...

Daniel Beckham The Finger Server 0.82 Beta - Pipe

Daniel Beckham The Finger Server 0.82 Beta - Pipe source: https://www.securityfocus.com/bid/974/info 'The Finger Server' is a perl script for providing .plan-like functionality through a website. Due to insufficient input checking it is possible for remote unauthenticated users to execute shell...

CVE-1999-0152

The CVE-1999-0152 issue affects the DG/UX finger daemon, where remote command execution is possible via shell metacharacters. Multiple connected sources corroborate that an attacker can trigger arbitrary commands on a target system, potentially gaining a shell. Documented impact is remote executi...