Fingerd

fingerd

Vendor: Gnu • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-1999-1165 1Gnu 1Fingerd Apr 16, 2026 Jul 21, 1999 N/A· v4 N/A· v3 7.2 HIGH· v2 GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files v...Show more GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.Show less
CVE-1999-0150 1Gnu 1Fingerd Apr 16, 2026 Jul 1, 1997 N/A· v4 N/A· v3 7.5 HIGH· v2 The Perl fingerd program allows arbitrary command execution from remote users.
CVE-1999-0612 2Gnu Microsoft 4Finger Service FingerdWindows 2000+1 more Apr 16, 2026 Mar 1, 1997 N/A· v4 N/A· v3 0.0 LOW· v2 A version of finger is running that exposes valid user information to any entity on the network.