CVE-1999-0259
MediumExploitation Probability (EPSS)
Elevated risk69th percentile - higher than 69% of all known CVEs
Summary
CVE-1999-0259 affects the cfingerd tool, which allows listing all users on a system via a query in the format search.@target.
Risk Assessment
The exposure of the user list may lead to increased risks of attacks such as phishing or brute force, threatening system security.
Recommendation
It is recommended to update cfingerd to the latest version or to implement alternative user management methods to minimize risk.
Other vulnerabilities in cfingerd
See all- CVE-1999-0708High
Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.
- CVE-1999-0813High
Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.
- CVE-1999-0243High
The cfingerd service in Linux could be exploited to gain root access.
Original NVD description (English source)
cfingerd lists all users on a system via search.**@target.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS