Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running finger.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EFingerD用户配置文件命令可执行漏洞
Vulnerability Description
EfingerD是一款免费的开放源代码的finger守护程序，使用在Linux操作系统下。 EfingerD在处理配置文件中存在漏洞可以导致以nobody权限执行任意命令。 当通过EfingerD查询和请求某个系统存在用户的时候，EefingerD会查找在用户主目录下的".efingerd"文件，如果此文件存在，就会以'nobody'的权限执行，.efingerd的输出将返回给查询和请求的用户。 因此本地用户可以在其目录下放置.efingerd文件，而自己通过EfingerD守护程序查询和请求自身时，此程
CVSS Information
N/A
Vulnerability Type
N/A