CVE-1999-1165: High severity GNU fingerd vulnerability
GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
cfingerdfrom your environment.Uninstall cfingerd (GNU fingerd) from affected systems if the service is not required to eliminate the vulnerability exposure.
- Configuration
Remove the setuid bit or configure fingerd to run as an unprivileged user so it does not run with elevated/root privileges.
cfingerd (GNU fingerd) privilege level / setuid = run without root/setuid privileges - Compensating control
Prevent local users from placing or executing malicious content in ~/.fingerrc and from creating symbolic links from ~/.plan, ~/.forward, or ~/.project to sensitive files (e.g., via filesystem permissions, ACLs, or mandatory access controls).
- Operational
Audit systems for signs of exploitation (malicious ~/.fingerrc, unexpected symlinks from ~/.plan/.forward/.project, or other indicators) and remediate any compromises; if compromise is suspected, contain the host and rotate credentials as appropriate.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1165?
CVE-1999-1165 is considered a critical vulnerability due to its potential to allow local users to gain root privileges.
How do I fix CVE-1999-1165?
To fix CVE-1999-1165, upgrade GNU fingerd to a version where this vulnerability is patched.
Who is affected by CVE-1999-1165?
CVE-1999-1165 affects users running GNU fingerd version 1.37 on their systems.
What types of attacks can be performed using CVE-1999-1165?
CVE-1999-1165 can allow local users to execute malicious programs or read arbitrary files via symbolic links.
Is CVE-1999-1165 an issue for all versions of GNU fingerd?
No, CVE-1999-1165 specifically affects version 1.37 of GNU fingerd; later versions may not be vulnerable.