exploit for (Debian's?) pfinger (fwd)
oops, wrong address.
---------- Forwarded message ----------
Date: Wed, 4 Dec 2002 08:06:00 -0600 (CST)
From: Drew Scott Daniels <umdanie8@cc.UManitoba.CA>
To: security@lists.debian.org
Subject: exploit for (Debian's?) pfinger
I found an exploit on Packetstorm described as "Pfinger v0.7.8 and below
local root exploit. Tested on Red Hat 7.2 - 8.0, Debian 3.0, Slackware
8.0, FreeBSD-4.6 and OpenBSD-3.1."
I cannot find pfinger in Debian. The exploit executes "finger" and not a
program called "pfinger" so it's not the Pascal finger program.
Does this exploit effect Debian? Is/was there a bug report for this?
Drew Daniels
Reply to: