Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cfingerd | Infodrom | 1.4.1 (including) | 1.4.1 (including) |
| Cfingerd | Infodrom | 1.4.2 (including) | 1.4.2 (including) |
| Cfingerd | Infodrom | 1.4.3 (including) | 1.4.3 (including) |
References
- http://www.debian.org/security/2001/dsa-066
- http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain
- http://www.securityfocus.com/archive/1/192844
- http://www.securityfocus.com/bid/2914
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6744
- http://www.debian.org/security/2001/dsa-066
- http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain
- http://www.securityfocus.com/archive/1/192844
- http://www.securityfocus.com/bid/2914
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6744