Vulnerability in Sun Solaris

CVE-2001-1503

The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host.

EPSS: 0.008 (51.7th percentile) — read the EPSS interpretation.

Affected products

Sun Solaris — versions 2.5, 2.5.1, 2.6
Sun Sunos — versions 5.5, 5.5.1, 5.6
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
cve@mitre.org (vendor-advisory, x_refsource_SUNALERT, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)