CVE-1999-0612
LowExploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
A version of the finger service is running, exposing valid user information to any entity on the network.
Risk Assessment
The disclosure of user information may lead to unauthorized access or social engineering attacks within the organization.
Recommendation
It is recommended to disable the finger service or implement appropriate security measures to restrict access to user information.
Other vulnerabilities in Usługa finger
See all- CVE-1999-0197High
The finger service on some systems may disclose information about certain user accounts.
- CVE-1999-0105Low
The finger service allows recursive searches using a long string of @ symbols.
- CVE-1999-0106Low
Finger redirection allows the use of 'finger bombs', which can lead to unauthorized access or disruption of system operations.
Original NVD description (English source)
A version of finger is running that exposes valid user information to any entity on the network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS