CVE-1999-0152

The DG/UX finger daemon allows remote command execution through shell metacharacters...

CVE-1999-0612

CVE-1999-0612 affects the finger service. The finger daemon exposes valid user information to any entity on the network, enabling information disclosure. Affected: finger on UNIX-like systems vulnerable in versions older than the patched release (e.g.,

solaris-2.7-finger-bounce.txt

Date: Sat, 26 Dec 1998 20:08:38 -0500 From: spoon To: [email protected] Subject: lame old finger bounce bug still exists in sparc 2.7 Hi, while beating on solaris today i found this... Yeah and finger is still enabled in inetd.conf by default in solaris 2.7. suprised this still exists... shrug...

GNU finger vulnerability

GNU security announcement: GNU Finger unfortunately has not been updated in many years, and has known security vulnerabilities. Please do not use it in production environments...

Finger Backdoor Detection

The remote finger daemon seems to be a backdoor, as it seems to react to the request : cmdrootsh@target If a root shell has been installed as /tmp/.sh, then this finger daemon is definitely a trojan, and this system has been compromised. C Tenable Network Security, Inc. include"compat.inc"; if...

Finger .@host Unused Account Disclosure

It is possible to force the remote finger daemon to display a list of accounts that have never been used by issuing the request : finger .@target A remote attacker could use this information to guess which operating system is running or mount further attacks against these accounts. C Tenable...

Multiple Web Server finger CGI Information Disclosure

The 'finger' CGI is installed. This can be used by a remote attacker to enumerate accounts on the system. Such information is typically valuable in conducting additional, more focused attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Finger Service Remote Information Disclosure

The remote host is running the 'finger' service. The purpose of this service is to show who is currently logged into the remote system, and to give information about the users of the remote system. It provides useful information to attackers, since it allows them to gain usernames, determine how...

in.fingerd Pipe Input Arbitrary Command Execution

It is possible to force the remote finger daemon to execute arbitrary commands by issuing requests like : finger |commandtoexecute@target An attacker may use this bug to gain a shell on this host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10126; scriptversion...

Finger 0@host Unused Account Disclosure

The remote host is running a 'finger' service that suffers from an information disclosure vulnerability. Specifically, it allows an unauthenticated attacker to display a list of accounts on the remote host that have never been used. This list can help an attacker to guess the operating system typ...

Finger Recursive Request Arbitrary Site Redirection

The remote finger service accepts redirect requests. That is, users can perform requests like : finger user@host@victim This allows an attacker to use this computer as a relay to gather information on a third-party network. In addition, this type of syntax can be used to create a denial of servic...

CVE-1999-0197

finger 0@host on some systems may print information on some user accounts...

CVE-1999-0198

finger .@host on some systems may print information on some user accounts...

PT-1999-1010 · Finger · Finger

Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue allows the 'finger' command to potentially disclose information about user accounts on certain systems when used with specific syntax, such as '0@host'. Recommendations: At the...

PT-1999-1011 · Finger · Finger

Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue is related to the finger command, which on some systems may print information on some user accounts when used with the .@host syntax. Recommendations: At the moment, there is no...

CVE-1999-0797

NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries...

CVE-1999-0152

The DG/UX finger daemon allows remote command execution through shell metacharacters...

PT-1997-1066 · Data General · Dg/Ux

Name of the Vulnerable Software and Affected Versions: DG/UX affected versions not specified Description: The issue allows remote command execution through shell metacharacters in the DG/UX finger daemon. Recommendations: At the moment, there is no information about a newer version that contains ...

AZL-6421 CVE-1999-0150 affecting package finger for versions less than 0.17-4

The Perl fingerd program allows arbitrary command execution from remote users...

CVE-1999-0106

Finger redirection allows finger bombs...