CVE-1999-0797

CVE-1999-0797 involves the NIS finger service, where an attacker can cause a denial of service by issuing a high volume of finger requests, which leads to a flood of NIS queries. The connected documents reiterate the same description across Red Hat and CVE lists, with no concrete details about af...

CVE-1999-0106

CVE-1999-0106 refers to a vulnerability in the finger service where remote finger redirection can be abused to cause a Denial of Service. Multiple connected sources corroborate: the OpenVAS/Nessus entries describe a remote finger service vulnerability that allows redirection requests (finger user...

CVE-1999-0197

finger 0@host on some systems may print information on some user accounts...

CVE-1999-0198

finger .@host on some systems may print information on some user accounts...

CVE-1999-0198

The CVE-1999-0198 entry concerns the finger service (finger .@host) which may disclose information about user accounts on affected systems. The core issue is an information-disclosure vulnerability in the remote finger daemon, enabling an attacker to view which accounts exist or have never been u...

CVE-2000-0128

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...

CVE-1999-0106

Finger redirection allows finger bombs...

CVE-1999-0105

finger allows recursive searches by using a long string of @ symbols...

CVE-1999-0105

CVE-1999-0105 affects the finger service. The issue allows recursive searches by using a long string of @ symbols, enabling a remote finger daemon to be abused as a relay. Nessus details show the remote finger service can accept redirect requests (e.g., finger user@host@victim), which can be used...

Daniel Beckham The Finger Server 0.82 Beta - Pipe

Daniel Beckham The Finger Server 0.82 Beta - Pipe source: https://www.securityfocus.com/bid/974/info 'The Finger Server' is a perl script for providing .plan-like functionality through a website. Due to insufficient input checking it is possible for remote unauthenticated users to execute shell...

CVE-1999-0612

CVE-1999-0612 affects the finger service. The finger daemon exposes valid user information to any entity on the network, enabling information disclosure. Affected: finger on UNIX-like systems vulnerable in versions older than the patched release (e.g.,

CVE-1999-0152

The DG/UX finger daemon allows remote command execution through shell metacharacters...

CVE-1999-0152

The CVE-1999-0152 issue affects the DG/UX finger daemon, where remote command execution is possible via shell metacharacters. Multiple connected sources corroborate that an attacker can trigger arbitrary commands on a target system, potentially gaining a shell. Documented impact is remote executi...

solaris-2.7-finger-bounce.txt

Date: Sat, 26 Dec 1998 20:08:38 -0500 From: spoon To: [email protected] Subject: lame old finger bounce bug still exists in sparc 2.7 Hi, while beating on solaris today i found this... Yeah and finger is still enabled in inetd.conf by default in solaris 2.7. suprised this still exists... shrug...

GNU finger vulnerability

GNU security announcement: GNU Finger unfortunately has not been updated in many years, and has known security vulnerabilities. Please do not use it in production environments...

Multiple Web Server finger CGI Information Disclosure

The 'finger' CGI is installed. This can be used by a remote attacker to enumerate accounts on the system. Such information is typically valuable in conducting additional, more focused attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Finger Backdoor Detection

The remote finger daemon seems to be a backdoor, as it seems to react to the request : cmdrootsh@target If a root shell has been installed as /tmp/.sh, then this finger daemon is definitely a trojan, and this system has been compromised. C Tenable Network Security, Inc. include"compat.inc"; if...

Finger .@host Unused Account Disclosure

It is possible to force the remote finger daemon to display a list of accounts that have never been used by issuing the request : finger .@target A remote attacker could use this information to guess which operating system is running or mount further attacks against these accounts. C Tenable...

in.fingerd Pipe Input Arbitrary Command Execution

It is possible to force the remote finger daemon to execute arbitrary commands by issuing requests like : finger |commandtoexecute@target An attacker may use this bug to gain a shell on this host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10126; scriptversion...

Finger Service Remote Information Disclosure

The remote host is running the 'finger' service. The purpose of this service is to show who is currently logged into the remote system, and to give information about the users of the remote system. It provides useful information to attackers, since it allows them to gain usernames, determine how...