Infodrom

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Infodrom records in CISA KEV

No Infodrom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cfingerd 5 records MEDIUM E-invoice Approval System 2 records MEDIUM

Records

7 records

TI-2001-00594 CVE-2001-0609 · GHSA-fppm-3x24-27q8

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote…

MEDIUM 60

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18235 Published 2001-07-27 No fix listed CWE-193

TI-2023-17539 CVE-2023-35066 · GHSA-pf54-9c7c-qh5r

SQLi in Infodrom Sofwares E-Invoice Approval System

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infodrom Software E-Invoice Approval System allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-07-25 Fixed in v.20230701 CWE-89

TI-2023-17540 CVE-2023-35067 · GHSA-hrhg-9qv8-cwj7

Plaintext Storage of a Password in Infodrom Sofwares E-Invoice Approval System

MEDIUM 40

Plaintext Storage of a Password vulnerability in Infodrom Software E-Invoice Approval System allows Read Sensitive Strings Within an Executable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00536 Published 2023-07-25 Fixed in v.20230701 CWE-256

TI-2001-00706 CVE-2001-0735 · GHSA-j7gx-9mq3-49g8

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled…

LOW 35

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.0164 Published 2001-10-12 No fix listed

TI-1999-00659 CVE-1999-0708 · GHSA-3rpm-2rjq-r29f

Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.

LOW 33

Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00811 Published 2000-01-18 No fix listed

TI-1999-00763 CVE-1999-0813 · GHSA-hqpc-mh2m-mmv8

Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes…

LOW 32

Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00467 Published 2000-04-18 No fix listed

TI-1999-00256 CVE-1999-0259 · GHSA-m4g2-9rpr-wc96

cfingerd lists all users on a system via search.**@target.

LOW 26

cfingerd lists all users on a system via search.**@target.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01403 Published 2000-01-18 No fix listed

Open these records in search →

Critical	2
High	4
Medium	1
Low	0
No CVSS	0