217 matches found
Solaris finger bug
Hi all: Recently, we monitored a cracker from Eastern Europe, who ran 'finger 9@host' against a Solaris 7 box, and got the following result: Login Name TTY Idle When Where daemon ??? . . . . bin ??? pts/1 Oct 2, 2002 xxx.lbl.gov sys ??? . . . . account1 ??? pts/8 Jul 20, 2000 yyy.lbl.gov account2...
akfingerd
The remote finger service appears to vulnerable to a remote attack which can disrupt the service of the finger daemon. This denial of service does not effect other services that may be running on the remote computer, only the finger service can be disrupted. akfingerd version 0.5 or earlier is...
fingerd buffer overflow
The scanner was able to crash the remote finger daemon by sending a too long request. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
fingerd buffer overflow
OpenVAS was able to crash the remote finger daemon by sending a too long request. This flaw is probably a buffer overflow and might be exploitable to run arbitrary code on this machine. OpenVAS Vulnerability Test $Id: fingeroverflow.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: fingerd...
CVE-2002-2091
CVE-2002-2091 affects Deception Finger Daemon (decfingerd) 0.7, exposing a format-string vulnerability in the username field of a finger request that could allow remote code execution. The issue is documented across multiple sources (e.g., NVD, Red Hat advisory, CVE list) with the impact describe...
CVE-2002-2091
Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the username of a finger request...
fingerd Remote Overflow
Nessus was able to crash the remote finger daemon by sending a very long request. This is likely due to a buffer overflow. A remote attacker could potentially exploit this to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17141; scriptversion...
FKey Arbitrary Remote File Disclosure
The remote finger daemon possibly 'fkey' allows users to read arbitrary files by supplying a file name that is 10 characters or shorter. A remote attacker could exploit this to read sensitive information, which could be used to mount further attacks. C Tenable Network Security, Inc...
Finger Service Detection
Binary data 1277.prm...
Finger Service Detection
Binary data 1276.prm...
FreeBSD 4.1.1 Finger Arbitrary File Access
Binary data 1281.prm...
CVE-2002-2091
Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the username of a finger request...
akfingerd 0.5 Multiple Vulnerabilities
The remote finger service appears to vulnerable to a remote attack which can disrupt the service of the finger daemon. This denial of service does not affect other services that may be running on the remote computer, only the finger service can be disrupted. akfingerd version 0.5 or earlier is...
CVE-2001-1503
The finger daemon in.fingerd in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host...
fingerd-cgi.txt
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++GOBBLES+SECURITY+RESEARCH+TEAM+INCORPORATED+++++++++++++++++ ALERT! ALERT! BERKELEY FINGER VULNERABILITY! ALERT! ALERT! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ This is NOT...
Solaris in.fingerd Unused Accounts Disclosure
The remote Solaris finger daemon will return a list of accounts that have never been used when it receives the request : finger 'a b c d e f g h'@target A remote attacker could use this information to guess which operating system is running, or to mount further attacks on these accounts. C Tenabl...
FreeBSD 4.1.1 Finger Arbitrary Remote File Access
The finger daemon running on the remote host will reveal the contents of arbitrary files when given a command similar to the following : finger /etc/passwd@target Which will return the contents of /etc/passwd. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10534;...
CVE-2000-0128
The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...
CVE-2000-0128
The CVE-2000-0128 entry affects Finger Server 0.82 and is caused by input that allows shell metacharacters to be interpreted, enabling remote command execution. The vulnerability is documented with a high CVSS v2 score (AV:N/AC:L/Au:N/C:C/I:C/A:C). The provided records do not specify affected pla...