Infodrom

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Infodrom records in CISA KEV

No Infodrom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cfingerd 5 records MEDIUM E-invoice Approval System 2 records MEDIUM

Records

5 records in Cfingerd · all components

TI-2001-00594 CVE-2001-0609 · GHSA-fppm-3x24-27q8

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote…

MEDIUM 60

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18235 Published 2001-07-27 No fix listed CWE-193

TI-2001-00706 CVE-2001-0735 · GHSA-j7gx-9mq3-49g8

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled…

LOW 35

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.0164 Published 2001-10-12 No fix listed

TI-1999-00659 CVE-1999-0708 · GHSA-3rpm-2rjq-r29f

Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.

LOW 33

Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00811 Published 2000-01-18 No fix listed

TI-1999-00763 CVE-1999-0813 · GHSA-hqpc-mh2m-mmv8

Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes…

LOW 32

Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00467 Published 2000-04-18 No fix listed

TI-1999-00256 CVE-1999-0259 · GHSA-m4g2-9rpr-wc96

cfingerd lists all users on a system via search.**@target.

LOW 26

cfingerd lists all users on a system via search.**@target.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01403 Published 2000-01-18 No fix listed

Open these records in search →

Critical	2
High	4
Medium	1
Low	0
No CVSS	0