CVE-2002-0424

efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which allows local users…

published April 2, 2003

CVSS
—
EPSS
0%
Percentile
24.6
In the wild
Unconfirmed
What it is

efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running finger.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00329 · 24.6th percentile
Published
2003-04-02T05:00Z
EPSS history
Timeline
  • 02 APR 05:00Z
    efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which allows local users…
    cvelistv5