CVE-2000-0915

CVE-2000-0915

Medium · published December 19, 2000

CVSS v2.0

5.0

EPSS

2%

Percentile

83.7

In the wild

Unconfirmed

What it is

fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.

The record

Technical detail

CVSS v2.0: 5.0 · MEDIUM
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.02389 · 83.7th percentile
Published: 2000-12-19T10:00Z

Affected products (1)

Product	Versions	Fixed in
freebsd/freebsd	all versions	—

References (10)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:54.fingerd.asc · [email protected]http://archives.neohapsis.com/archives/bugtraq/2000-10/0017.html · [email protected]http://www.osvdb.org/433 · [email protected]http://www.securityfocus.com/bid/1803 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/5385 · [email protected]ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:54.fingerd.asc · af854a3a-2127-422b-91ae-364da2661108 http://archives.neohapsis.com/archives/bugtraq/2000-10/0017.html · af854a3a-2127-422b-91ae-364da2661108 http://www.osvdb.org/433 · af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/bid/1803 · af854a3a-2127-422b-91ae-364da2661108 https://exchange.xforce.ibmcloud.com/vulnerabilities/5385 · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

22 JAN 05:00Z
fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name
cvelistv5