Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

cfingerd: code execution

Package(s):

cfingerd

CVE #(s):

CVE-2013-1049

Created:

March 1, 2013

Updated:

March 6, 2013

Description:

From the Debian advisory:

Malcolm Scott discovered a remote-exploitable buffer overflow in the rfc1413 (ident) client of cfingerd, a configurable finger daemon. This vulnerability was introduced in a previously applied patch to the cfingerd package in 1.4.3-3.

Alerts:

Debian

DSA-2635-1

2013-03-01

(Log in to post comments)