CVE-2007-4310

Published: Aug 13, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a "finger 9@host" command, a different vulnerability than CVE-2001-1503.

Affected (3)

Products: Sun: Sunos

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Sun Sunos	Version 5.7
Sun Sunos	Version 5.8
Sun Sunos	Version 5.9

References (6)

http://securityreason.com/securityalert/2996

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/474858/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/474927/100/100/threaded

Source: cve@mitre.org

http://securityreason.com/securityalert/2996

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/474858/100/100/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/474927/100/100/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.