Fingerd

Vendor:

First CVE: Mar 1, 1997 · Active for 29 years

3

Total CVEs

More Total CVEs than 64% of tracked products

1.5

Avg CVEs / Year

Higher CVE frequency than 56% of tracked products

4.9

Avg CVSS

Higher Avg CVSS than 7% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Fingerd over time

Volume of CVEsAvg CVSS Base Score

First CVE

Mar 1, 1997

29 years ago

Most Recent CVE

Jul 21, 1999

9,865 days ago

CVE Severity & Scoring

Fingerd3 CVEs

33%

67%

All CVEs352,231 CVEs

45%

40%

11%

LowHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown3 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown3 (100.0%)

User Interaction

None0 (0.0%)

Unknown3 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown3 (100.0%)

Top CVEs

Signals from CVEs in this product scope (3 CVEs).

3 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-1999-0612LOW A version of finger is running that exposes valid user information to any entity on the network.	Mar 1, 1997	0.0	32	NO	NO
CVE-1999-0150HIGH The Perl fingerd program allows arbitrary command execution from remote users.	Jul 1, 1997	7.5	20	NO	NO
CVE-1999-1165HIGH GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fing	Jul 21, 1999	7.2	18	NO	NO

View all 3 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (3 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (3 CVEs).

Media Mentions

Signals from CVEs in this product scope (3 CVEs).

Top CNAs Publishing CVEs For Fingerd

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	KEV	Exploits
1.37	1	7.2	0.5%	0	0