CVE-2001-0609 Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.
CriticalCVSS 9.8
EPSS 18.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| infodrom cfingerd | <= 1.4.3 | No fix listed |
References
- 20010411 CFINGERD remote vulnerability broken-link exploit mailing-list patch vendor-advisory
- 2576 broken-link exploit patch third-party-advisory vdb-entry vendor-advisory
- cfingerd-remote-format-string(6364) third-party-advisory vdb-entry