CVE-2000-0915

fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name...

[[email protected]: bin/21704: enabling fingerd makes files world readable]

----- Forwarded message from [email protected] ----- From: [email protected] To: [email protected] Subject: bin/21704: enabling fingerd makes files world readable Number: 21704 Category: bin Synopsis: enabling fingerd makes files world readable Confidential: no Severity: serious Priority...

Security Advisory: FreeBSD-SA-00:54.fingerd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:54 Security Advisory FreeBSD, Inc. Topic: fingerd allows remote reading of filesystem Category: core Module: fingerd Announced: 2000-10-13 Credits: NIIMI Satoshi...

Серьезная дыра в fingerd

fingerd позволяет обратиться к любому файлу с правами пользователя nobody...

FreeBSD-SA-00:54.fingerd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:54 Security Advisory FreeBSD, Inc. Topic: fingerd allows remote reading of filesystem Category: core Module: fingerd Announced: 2000-10-13 Credits: NIIMI Satoshi Affects:...

fingerd

I am new on the list so i dont know if you knew that. On Irix 6.4 with all patches installed the fingerd seems to like to display the shadow file to all users. ln -s /etc/shadow /path/user/.plan finger [email protected] This feature was found by a student -Zanikolas Serafim- while he was...

Большие проблемы с fingerd в IRIX

fingerd работает с привилегиями root и при этом следует символьным линком при чтении .plan в домашнем каталоге пользователя, что позволяет пользователю прочитать любой файл...

CVE-1999-0150

The CVE-1999-0150 issue concerns the Perl fingerd service. Connected sources specify that the vulnerability allows arbitrary command execution from remote users and affects the finger package. Multiple entries indicate affected versions are those prior to 0.17-4, with a patched version 0.17-4 ava...

CVE-1999-0150

The Perl fingerd program allows arbitrary command execution from remote users...

fingerd-DoS.txt

Date: Wed, 5 Aug 1998 11:39:02 -0400 From: Fiji Subject: Solaris 2.5.1/2.6 fingerd bug Well it seems that Sun reintroduced the finger forwarding and finger DoS into Solaris 2.5.1 and 2.6. try finger @host@[email protected] times.... This should run the of processes in excess of 1500 and shoot the...

CVE-1999-1165

GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to 1 gain root privileges via a malicious program in the .fingerrc file, or 2 read arbitrary files via symbolic links from .plan, .forward, or .project files...

CVE-1999-0150

The Perl fingerd program allows arbitrary command execution from remote users...

PT-1997-1065 · Perl · Perl Fingerd

Name of the Vulnerable Software and Affected Versions: Perl fingerd affected versions not specified Description: The issue allows arbitrary command execution from remote users, potentially leading to unauthorized access and control. Recommendations: At the moment, there is no information about a...

BSD 4.2 - 'fingerd' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/2/info fingerd is a remote user information server that implements the protocol defined in RFC742. There exists a buffer overflow in finderd that allows a remote attacker to execute any local binaries. finderd reads input from its socket using the gets...

BSD 4.2 - fingerd Remote Buffer Overflow

BSD 4.2 - fingerd Remote Buffer Overflow source: https://www.securityfocus.com/bid/2/info fingerd is a remote user information server that implements the protocol defined in RFC742. There exists a buffer overflow in finderd that allows a remote attacker to execute any local binaries. finderd read...