Test ID:	1.3.6.1.4.1.25623.1.0.10534
Category:	Finger abuses
Title:	FreeBSD 4.1.1 Finger
Summary:	NOSUMMARY
Description:	Description: There is a bug in the remote finger service that allows anyone to read arbitrary files on this host by doing a 'finger' command on the name of targeted file. For instance : finger /etc/passwd@target Will display the content of /etc/passwd Solution : disable the finger service in /etc/inetd.conf and restart the inetd process, or upgrade your finger daemon Risk factor : High
Cross-Ref:	BugTraq ID: 1803 Common Vulnerability Exposure (CVE) ID: CVE-2000-0915 http://www.securityfocus.com/bid/1803 Bugtraq: 20001002 [sa2c@and.or.jp: bin/21704: enabling fingerd makes files world readable] (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-10/0017.html FreeBSD Security Advisory: FreeBSD-SA-00:54 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:54.fingerd.asc http://www.osvdb.org/433 XForce ISS Database: freebsd-fingerd-files(5385) https://exchange.xforce.ibmcloud.com/vulnerabilities/5385
Copyright	This script is Copyright (C) 2000 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.