CVE-1999-0105
LowExploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
The finger service allows recursive searches using a long string of @ symbols.
Risk Assessment
Exploitation of this vulnerability may lead to system overload or disclosure of user information.
Recommendation
It is recommended to limit the length of @ symbol strings in queries to the finger service.
Other vulnerabilities in Usługa finger
See all- CVE-1999-0612Low
A version of the finger service is running, exposing valid user information to any entity on the network.
- CVE-1999-0197High
The finger service on some systems may disclose information about certain user accounts.
- CVE-1999-0106Low
Finger redirection allows the use of 'finger bombs', which can lead to unauthorized access or disruption of system operations.
Original NVD description (English source)
finger allows recursive searches by using a long string of @ symbols.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS