CVE-2001-0735

Published: Oct 18, 2001Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.

Affected (3)

Products: Infodrom: Cfingerd

Infodrom

1 product

Cfingerd

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Infodrom Cfingerd	Version 1.4.1
Infodrom Cfingerd	Version 1.4.2
Infodrom Cfingerd	Version 1.4.3

References (10)

http://www.debian.org/security/2001/dsa-066

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/192844

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/2914

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/6744

Source: cve@mitre.org

http://www.debian.org/security/2001/dsa-066