Finger Server Pipe Vulnerability
BID:974
Info
Finger Server Pipe Vulnerability
| Bugtraq ID: | 974 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Feb 04 2000 12:00AM |
| Updated: | Feb 04 2000 12:00AM |
| Credit: | Posted to Bugtraq on February 4, 2000 by Iain Wade <[email protected]>. |
| Vulnerable: |
Daniel Beckham The Finger Server 0.82 BETA |
| Not Vulnerable: | |
Discussion
Finger Server Pipe Vulnerability
'The Finger Server' is a perl script for providing .plan-like functionality through a website. Due to insufficient input checking it is possible for remote unauthenticated users to execute shell commands on the server which will run with the priveleges of the webserver.
'The Finger Server' is a perl script for providing .plan-like functionality through a website. Due to insufficient input checking it is possible for remote unauthenticated users to execute shell commands on the server which will run with the priveleges of the webserver.
Exploit / POC
Finger Server Pipe Vulnerability
A request like:
http ://target/finger.cgi?action=archives&cmd=specific
&filename=99.10.28.15.23.username.|<shell command>|
(split for readability)
will cause the server to execute whatever command is specified.
A request like:
http ://target/finger.cgi?action=archives&cmd=specific
&filename=99.10.28.15.23.username.|<shell command>|
(split for readability)
will cause the server to execute whatever command is specified.
Solution / Fix
Finger Server Pipe Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].