CVE-2001-0735

EPSS 1.6%

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/20962unverified exploitdbwww.exploit-db.com/exploits/20963unverified exploitdbwww.exploit-db.com/exploits/20964unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/6744 http://www.debian.org/security/2001/dsa-066 http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain http://www.securityfocus.com/archive/1/192844 http://www.securityfocus.com/bid/2914