Lucene search
MitreCVE-2001-1503HistoryJun 21, 2005 - 4:00 a.m.
CVE-2001-1503
2005-06-2104:00:00
mitre
web.nvd.nist.gov
40
sun solaris
sunos
cve-2001-1503
in.fingerd
fingerprint daemon
remote attacker
host account.list.
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
59.0%
The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger ‘a b c d e f g h’@host.
Affected configurations
Node
sunsolarisMatch2.5x86
ORsunsolarisMatch2.5.1x86
ORsunsolarisMatch2.6
ORsunsolarisMatch7.0x86
ORsunsolarisMatch8.0x86
ORsunsunosMatch-
ORsunsunosMatch5.5
ORsunsunosMatch5.5x86
ORsunsunosMatch5.5.1
ORsunsunosMatch5.5.1x86
ORsunsunosMatch5.6
ORsunsunosMatch5.6x86
ORsunsunosMatch5.7
ORsunsunosMatch5.7x86
ORsunsunosMatch5.8
ORsunsunosMatch5.8x86
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sun | solaris | 2.5 | cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:* |
| sun | solaris | 2.5.1 | cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:* |
| sun | solaris | 2.6 | cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:* |
| sun | solaris | 7.0 | cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:* |
| sun | solaris | 8.0 | cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:* |
| sun | sunos | - | cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:* |
| sun | sunos | 5.5 | cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:* |
| sun | sunos | 5.5 | cpe:2.3:o:sun:sunos:5.5:*:x86:*:*:*:*:* |
| sun | sunos | 5.5.1 | cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:* |
| sun | sunos | 5.5.1 | cpe:2.3:o:sun:sunos:5.5.1:*:x86:*:*:*:*:* |
Related
securityvulns
securityvulns
Solaris finger bug
2007-07-28 00:00:00
nvd
nvd
CVE-2001-1503
2001-12-31 05:00:00
CVE-2007-4310
2007-08-13 21:17:00
openvas
openvas
Solaris Update for in.fingerd 111232-01
2009-06-03 00:00:00
Solaris Update for in.fingerd 111232-01
2009-06-03 00:00:00
nessus
nessus
Solaris in.fingerd Unused Accounts Disclosure
2001-10-22 00:00:00
cvelist
cvelist
CVE-2001-1503
2005-06-21 04:00:00
CVE-2007-4310
2007-08-13 21:00:00
prion
prion
Command injection
2007-08-13 21:17:00
cve
cve
CVE-2007-4310
2007-08-13 21:17:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
59.0%
Related for CVE-2001-1503