Published: 18/10/2001 Updated: 07/11/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 735

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in cfingerd 1.4.3 and previous versions with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
infodrom cfingerd 1.4.3
infodrom cfingerd 1.4.1
infodrom cfingerd 1.4.2

Steven van Acker reported on bugtraq that the version of cfingerd (a configurable finger daemon) as distributed in Debian GNU/Linux 22 suffers from two problems: The code that reads configuration files (files in which $ commands are expanded) copied its input to a buffer without checking for a buffer overflow When the ALLOW_LINE_PARSING fe ...

source: wwwsecurityfocuscom/bid/2914/info cfingerd is a secure implementation of the finger daemon cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team A buffer overflow in cfingerd makes it possible for a local user to gain elevated privileges Due to insufficient validation of input ...

source: wwwsecurityfocuscom/bid/2914/info cfingerd is a secure implementation of the finger daemon cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team A buffer overflow in cfingerd makes it possible for a local user to gain elevated privileges Due to insufficient validation of input, ...

source: wwwsecurityfocuscom/bid/2914/info cfingerd is a secure implementation of the finger daemon cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team A buffer overflow in cfingerd makes it possible for a local user to gain elevated privileges Due to insufficient validation of input, a ...

NVD-CWE-Other http://www.securityfocus.com/archive/1/192844 http://www.debian.org/security/2001/dsa-066 http://www.securityfocus.com/bid/2914 https://exchange.xforce.ibmcloud.com/vulnerabilities/6744 http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain https://nvd.nist.gov https://www.debian.org/security/./dsa-066 https://www.exploit-db.com/exploits/20964/

CVE-2001-0735

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect