Vulnerability in Michael Baumer Pfinger
CVE-2002-2048
Buffer overflow in PFinger 0.7.8 client allows remote attackers to execute arbitrary code via a long query value passed to the (1) finger program, (2) -l, (3) -d, and (4) -t options. NOTE: if PFinger is not setuid or setgid, then this issue would not cross privilege boundaries and would not be considered a vulnerability.
EPSS: 0.029 (85.3th percentile) — read the EPSS interpretation.
Affected products
- Michael_baumer Pfinger — versions 0.7.8
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_VULN-DEV)
- cve@mitre.org (vdb-entry, x_refsource_XF)