CVE-2001-0609

Critical

Published: 02/08/2001(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

CVE-2001-0609 describes a format string vulnerability in Infodrom cfingerd version 1.4.3 and earlier, allowing a remote attacker to gain additional privileges via a malformed ident reply passed to the syslog function.

Risk Assessment

The organization may be exposed to unauthorized access to systems, potentially leading to privilege escalation and damage.

Recommendation

It is recommended to update Infodrom cfingerd to the latest version to mitigate this vulnerability and to monitor syslog logs for suspicious activities.

Original NVD description (English source)

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.