Test ID:	1.3.6.1.4.1.25623.1.0.10038
Category:	Finger abuses
Title:	Cfinger's search.**@host feature
Summary:	NOSUMMARY
Description:	Description: The remote host is running 'cfingerd', a finger daemon. There is a bug in the remote cfinger daemon which allows anyone to get the lists of the users of this system, when issuing the command : finger search.**@victim This information can in turn be used by an attacker to set up a brute force login attack against this host. Solution : use another finger daemon or disable this service in /etc/inetd.conf Risk factor : Low / Medium
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0259 Bugtraq: 19970523 cfingerd vulnerability (Google Search) XForce ISS Database: cfinger-user-enumeration
Copyright	This script is Copyright (C) 1999 Renaud Deraison

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.