[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

exploit for (Debian's?) pfinger (fwd)

oops, wrong address.

---------- Forwarded message ----------
Date: Wed, 4 Dec 2002 08:06:00 -0600 (CST)
From: Drew Scott Daniels <umdanie8@cc.UManitoba.CA>
To: security@lists.debian.org
Subject: exploit for (Debian's?) pfinger

I found an exploit on Packetstorm described as "Pfinger v0.7.8 and below
local root exploit. Tested on Red Hat 7.2 - 8.0, Debian 3.0, Slackware
8.0, FreeBSD-4.6 and OpenBSD-3.1."

I cannot find pfinger in Debian. The exploit executes "finger" and not a
program called "pfinger" so it's not the Pascal finger program.

Does this exploit effect Debian? Is/was there a bug report for this?

     Drew Daniels

Reply to: