Cfingerd

This hub aggregates every CVE we track for Cfingerd, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 6 most recently published vulnerabilities affecting Cfingerd.

• CVE-2013-1049Buffer overflow in the RFC1413 (ident) client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted response.10.0Mar 12, 2013
• CVE-2001-0735Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.7.2Oct 12, 2001
• CVE-2001-0609Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.9.8Jul 27, 2001
• CVE-1999-0813Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.7.2Apr 18, 2000
• CVE-1999-0259cfingerd lists all users on a system via search.**@target.5.0Jan 18, 2000
• CVE-1999-0708Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.7.2Jan 18, 2000