CVE-2002-0423 Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address w...
HighCVSS 10.0
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname that is obtained via a reverse DNS lookup.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| efingerd | = 1.3 | No fix listed |
| efingerd | = 1.6.1 | No fix listed |
References
- 20020306 efingerd remote buffer overflow and a dangerous feature mailing-list
- melkor.dnp.fmph.uniba.sk
- efingerd-reverse-lookup-bo(8380) patch vdb-entry vendor-advisory
- 4239 vdb-entry vendor-advisory