Description
The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host.
References
- solaris-fingerd-list-accounts(7334) vdb-entry
- 20011022 Solaris fingerd disclose complete user list mailing-list
- 27116 vendor-advisory
- 3457 vdb-entry