35 matches found
CVE-1999-0150
The Perl fingerd program allows arbitrary command execution from remote users...
EUVD-1999-1146
Malware in sbrugna...
EUVD-2000-0902
Malware in sbrugna...
EUVD-2011-2276
Malware in sbrugna...
The Perl fingerd program allows arbitrary command execution from remote users.
...
Lexmark Printer Detection Consolidation
Consolidation of Lexmark Printer detections. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Morris Worm fingerd Stack Buffer Overflow Exploit
This Metasploit module exploits a stack buffer overflow in fingerd on 4.3BSD. This vulnerability was exploited by the Morris worm in 1988-11-02. Cliff Stoll reports on the worm in the epilogue of The Cuckoo's Egg. This module requires Metasploit: https://metasploit.com/download Current source:...
Morris Worm fingerd Stack Buffer Overflow
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Morris Worm fingerd Stack Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in fingerd on 4.3BSD. This...
Morris Worm fingerd Stack Buffer Overflow
This module exploits a stack buffer overflow in fingerd on 4.3BSD. This vulnerability was exploited by the Morris worm in 1988-11-02. Cliff Stoll reports on the worm in the epilogue of The Cuckoo's Egg. Currently, only bsd/vax/shellreversetcp is supported. This module requires Metasploit:...
CVE-2011-2287
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to fingerd...
Sql injection
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to fingerd...
CVE-2011-2287
CVE-2011-2287 affects Oracle Solaris 8, 9, 10 and 11 Express via fingerd, allowing remote attackers to impact availability. Connected advisories/plugins confirm specific patches: Solaris 9 SPARC patch 147264-01; Solaris 10 x86 patch 146674-01; Solaris 10 SPARC patch 146673-01. Patches installable...
CVE-2011-2287
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to fingerd...
CVE-2008-5120
Stack-based buffer overflow in the Process Software MultiNet finger service aka FINGERD for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string...
CVE-2008-5120
Stack-based buffer overflow in the Process Software MultiNet finger service aka FINGERD for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string...
OpenVMS fingerd buffer overflow
Buffer overflow on oversized username...
CVE-1999-1165
GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to 1 gain root privileges via a malicious program in the .fingerrc file, or 2 read arbitrary files via symbolic links from .plan, .forward, or .project files...
CVE-1999-1165
GNU fingerd 1.37 is affected. The flaw is failure to drop privileges before accessing user information, enabling local attackers to (1) gain root via a malicious .fingerrc and (2) read arbitrary files via .plan/.forward/.project symbolic links. No patch/version or remediation is specified in the ...
CVE-2000-0915
fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name...
CVE-2000-0915
The CVE-2000-0915 issue affects the FreeBSD finger daemon on version 4.1.1, where a remote attacker can read arbitrary files by specifying the target file name instead of a user name (e.g., finger /etc/passwd@target). The root cause is improper handling of the file-path argument by fingerd, enabl...