CVE-1999-1165

GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious…

published September 12, 2001

CVSS
—
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Published
2001-09-12T04:00Z
EPSS history
Timeline
  • 12 SEP 04:00Z
    GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious…
    cvelistv5