Test ID:	1.3.6.1.4.1.25623.1.0.59978
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: gnu-finger
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory.
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: gnu-finger CVE-1999-1165 GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-1165 BugTraq ID: 535 http://www.securityfocus.com/bid/535 Bugtraq: 19950317 GNU finger 1.37 executes ~/.fingerrc with gid root (Google Search) http://www.securityfocus.com/archive/1/2478 Bugtraq: 19990721 old gnu finger bugs (Google Search) http://marc.info/?l=bugtraq&m=93268249021561&w=2
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.