Finger 0@host Unused Account Disclosure

The remote host is running a 'finger' service that suffers from an information disclosure vulnerability. Specifically, it allows an unauthenticated attacker to display a list of accounts on the remote host that have never been used. This list can help an attacker to guess the operating system typ...

Finger Recursive Request Arbitrary Site Redirection

The remote finger service accepts redirect requests. That is, users can perform requests like : finger user@host@victim This allows an attacker to use this computer as a relay to gather information on a third-party network. In addition, this type of syntax can be used to create a denial of servic...

CVE-1999-0198

finger .@host on some systems may print information on some user accounts...

CVE-1999-0197

finger 0@host on some systems may print information on some user accounts...

PT-1999-1011 · Finger · Finger

Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue is related to the finger command, which on some systems may print information on some user accounts when used with the .@host syntax. Recommendations: At the moment, there is no...

PT-1999-1010 · Finger · Finger

Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue allows the 'finger' command to potentially disclose information about user accounts on certain systems when used with specific syntax, such as '0@host'. Recommendations: At the...

CVE-1999-0797

NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries...

CVE-1999-0152

The DG/UX finger daemon allows remote command execution through shell metacharacters...

PT-1997-1066 · Data General · Dg/Ux

Name of the Vulnerable Software and Affected Versions: DG/UX affected versions not specified Description: The issue allows remote command execution through shell metacharacters in the DG/UX finger daemon. Recommendations: At the moment, there is no information about a newer version that contains ...

AZL-6421 CVE-1999-0150 affecting package finger for versions less than 0.17-4

The Perl fingerd program allows arbitrary command execution from remote users...

CVE-1999-0105

finger allows recursive searches by using a long string of @ symbols...

CVE-1999-0106

Finger redirection allows finger bombs...

CVE-1999-0612

A version of finger is running that exposes valid user information to any entity on the network...

AZL-6422 CVE-1999-0612 affecting package finger for versions less than 0.17-4

A version of finger is running that exposes valid user information to any entity on the network...

PT-1997-1052 · Finger · Finger

Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue allows for recursive searches by utilizing a long string of @ symbols. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-1997-1053 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves finger redirection, which can lead to finger bombs. No further details are provided about the nature of this issue or its potential impact. Recommendations: At the...

PT-1997-1164 · Finger · Finger

Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue exposes valid user information to any entity on the network due to a version of finger being run. Recommendations: At the moment, there is no information about a newer version that...