CVE-2011-2287

Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to fingerd...

PT-2011-3740

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 8 through 11 Express Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors related to the fingerd service. Recommendations For Oracle Solaris versions ...

CVE-2008-5120

Stack-based buffer overflow in the Process Software MultiNet finger service aka FINGERD for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string...

CVE-2008-5120

Stack-based buffer overflow in the Process Software MultiNet finger service aka FINGERD for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string...

CVE-2008-5120: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Process Software MultiNet finger service aka FINGERD for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string...

OpenVMS fingerd buffer overflow

Buffer overflow on oversized username...

CVE-1999-1165

GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to 1 gain root privileges via a malicious program in the .fingerrc file, or 2 read arbitrary files via symbolic links from .plan, .forward, or .project files...

CVE-1999-1165

GNU fingerd 1.37 is affected. The flaw is failure to drop privileges before accessing user information, enabling local attackers to (1) gain root via a malicious .fingerrc and (2) read arbitrary files via .plan/.forward/.project symbolic links. No patch/version or remediation is specified in the ...

CVE-1999-1165: Undefined Security Weakness

GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to 1 gain root privileges via a malicious program in the .fingerrc file, or 2 read arbitrary files via symbolic links from .plan, .forward, or .project files...

CVE-2000-0915

The CVE-2000-0915 issue affects the FreeBSD finger daemon on version 4.1.1, where a remote attacker can read arbitrary files by specifying the target file name instead of a user name (e.g., finger /etc/passwd@target). The root cause is improper handling of the file-path argument by fingerd, enabl...

CVE-2000-0915

fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name...

CVE-2000-0915

fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name...

CVE-2000-0915: Undefined Security Weakness

fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name...

Серьезная дыра в fingerd

fingerd позволяет обратиться к любому файлу с правами пользователя nobody...

Security Advisory: FreeBSD-SA-00:54.fingerd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:54 Security Advisory FreeBSD, Inc. Topic: fingerd allows remote reading of filesystem Category: core Module: fingerd Announced: 2000-10-13 Credits: NIIMI Satoshi...

FreeBSD-SA-00:54.fingerd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:54 Security Advisory FreeBSD, Inc. Topic: fingerd allows remote reading of filesystem Category: core Module: fingerd Announced: 2000-10-13 Credits: NIIMI Satoshi Affects:...

[[email protected]: bin/21704: enabling fingerd makes files world readable]

----- Forwarded message from [email protected] ----- From: [email protected] To: [email protected] Subject: bin/21704: enabling fingerd makes files world readable Number: 21704 Category: bin Synopsis: enabling fingerd makes files world readable Confidential: no Severity: serious Priority...

Большие проблемы с fingerd в IRIX

fingerd работает с привилегиями root и при этом следует символьным линком при чтении .plan в домашнем каталоге пользователя, что позволяет пользователю прочитать любой файл...

fingerd

I am new on the list so i dont know if you knew that. On Irix 6.4 with all patches installed the fingerd seems to like to display the shadow file to all users. ln -s /etc/shadow /path/user/.plan finger [email protected] This feature was found by a student -Zanikolas Serafim- while he was...

CVE-1999-0150

The CVE-1999-0150 issue concerns the Perl fingerd service. Connected sources specify that the vulnerability allows arbitrary command execution from remote users and affects the finger package. Multiple entries indicate affected versions are those prior to 0.17-4, with a patched version 0.17-4 ava...