CVE-1999-1165: GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (

Published n/a Updated 2026-08-21T04:30:48.033Z

Summary

GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.

Severity

UNKNOWN

Source Attribution

Source: NVD · Updated: 2026-08-21T04:30:48.033Z · Confidence: high

Impact

Based on CVSS vector: n/a — assess confidentiality, integrity, and availability impact via the official vector documentation.

Affected Software

Fix

Upgrade affected software to the fixed version identified above. Apply vendor patches and monitor advisories before exposed systems go unpatched.

References