CVE-2002-0424 | BDVDB-2026-5151 Detail

Description#

efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running finger.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12003-04-02Record published in the CVE List.
2. Version 22024-08-08Most recent update recorded in the CVE List.