Unscored CVE-2007-4310 EUVD-2007-4293GHSA-hv2h-86hc-65fp

The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS …

Published Aug 13, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a "finger 9@host" command, a different vulnerability than CVE-2001-1503.

References

20070727 Re: Solaris finger bug mailing-list
2996 third-party-advisory
20070727 Solaris finger bug mailing-list