CVE-1999-0813

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published Aug 10, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0813 is a vulnerability affecting the cfingerd service with ALLOW_EXECUTION enabled. The issue arises due to the service's failure to properly drop privileges when executing programs on behalf of users. Consequently, local users can exploit this weakness to elevate their privileges to root level. This vulnerability poses a significant security risk and should be addressed promptly by system administrators by disabling ALLOW_EXECUTION or upgrading to a patched version of the cfingerd service.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share