CVE-1999-0612

CVSS 2.0 Score 0 of 10 (low)

Details

Published Mar 1, 1997
Updated: Nov 20, 2024

Summary

CVE-1999-0612 is a vulnerability affecting certain versions of the Unix command "finger." This issue allows any network entity to access valid user information, including login names, login times, and idle status. The vulnerability arises due to the lack of proper access control in the "finger" service. This information disclosure weakness can be exploited to gain insight into system activity and potentially launch targeted attacks. To mitigate this risk, it is recommended to disable or update the "finger" service to a version that addresses this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows NT
  • Microsoft Windows 2000

Affected Vendors

  • Microsoft
  • GNU