Cfingerd 'search' Command Information Disclosure Vulnerability

  1. Network Vulnerabilities
  2. Finger abuses
  3. Cfingerd 'search' Command Information Disclosure Vulnerability
Summary
This host is running Cfingerd service and is prone to information disclosure vulnerability.
Impact
Successful exploitation will allow attacker to obtain sensitive information that could aid in further attacks. Impact Level: Application
Solution
Upgrade to Cfingerd version 1.2.3 or later For updates refer to http://www.infodrom.org/projects/cfingerd/finger.php
Insight
The flaw exists due to an error in the finger service which allows to list all usernames on the host via 'search.**' command.
Affected
Cfingerd version 1.2.2
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities