CVEvulnerability

CVE-1999-0813

7.2 HIGH Published 1999-08-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1999-08-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.

Affected configurations

• infodrom cfingerd (<= 1.4.0)

Related

Referenced by CWE · observed example (1)

  • CWE-271 Privilege Dropping / Lowering Errors weakness

References