Bugtraq mailing list archives
cfingerd vulnerability
From: rodrigob () MORCEGO LINKWAY COM BR (Rodrigo Barbosa)
Date: Fri, 23 May 1997 22:45:04 -0300
Hello, i don't know if it has been noticed before, but cfingerd installs, by default, a search service. You can use it as: finger search.username@host Thats ok, but you can use keymasks. And if you do: finger search.*@host you can get a list of all the users in the system. I've tried it if cfinger 1.2.2 (probably it is not the latest version). -- Rodrigo Barbosa (Personal e-mail: rodrigob () darkover org ) Network Administrator (Work e-mail : rodrigob () morcego linkway com br ) PGP Key,HomePage address etc: finger rodrigob () morcego linkway com br PGP Fingerprint: [ D9 15 02 9E 72 32 5A 0A AC F0 DA 11 6A 4C A3 12 ] --> Except where explicitly stated I speak on my own behalf. <--
Current thread:
- OOB Bug stills persists after hot fix Matthew Dovey (May 17)
- <Possible follow-ups>
- Re: OOB Bug stills persists after hot fix Dan Freise (May 19)
- Re: OOB Bug stills persists after hot fix Ervin Fried (May 20)
- Re: OOB Bug stills persists after hot fix Ervin Fried (May 20)
- Re: OOB Bug stills persists after hot fix Ervin Fried (May 20)
- Re: OOB Bug stills persists after hot fix Ervin Fried (May 22)
- New M$ TCP/IP bug found.... got the NT Blue's yet? Kelly E. Gibbs (May 22)
- PMDF sendmail vulnerability Jonathan Rozes (May 23)
- Update to Windows 95 TCP/IP to Address Out-of-Band Issue Aleph One (May 23)
- [WinNT] Post-SP3 Hotfix Avail for Macintosh OOB DOS Attack Sam Schlansky (May 23)
- cfingerd vulnerability Rodrigo Barbosa (May 23)
- Re: cfingerd vulnerability Edward S. Marshall (May 24)
- Re: cfingerd vulnerability Ken Hollis (May 24)
- Re: cfingerd vulnerability Alan Brown (May 25)
- Re: cfingerd vulnerability Michael Stone (May 25)
- winnuke in one line of perl5.004 Randal Schwartz (May 25)
- Re: cfingerd vulnerability Felix von Leitner (May 25)
- Irix buffer overflow in /bin/df David Hedley (May 24)
- Re: Irix buffer overflow in /bin/df J.A. Gutierrez (May 24)
- Irix: Pandora's box opened Yuri Volobuev (May 24)
- BitchX p139 script the lerPer (May 24)