Description
fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.
References
- 433 vdb-entry
- 20001002 [sa2c@and.or.jp: bin/21704: enabling fingerd makes files world readable] mailing-list
- 1803 vdb-entry
- freebsd-fingerd-files(5385) vdb-entry