Intrusion Prevention

Finger.Server.Pipe.Command.Injection

Description

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.

Affected Products

Daniel Beckham Finger Server 0.80BETA
Daniel Beckham Finger Server 0.81BETA
Daniel Beckham Finger Server 0.82BETA
Daniel Beckham Finger Server 0.83BETA

Impact

Execute commands

Recommended Actions

Currently we are not aware of any vendor supplied patches for this issue.
http://www.glazed.org/finger/

CVE References

CVE-2000-0128