Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

finger command may reveal user account details

CVE-1999-0197 · published 27 years ago
Summary

On certain systems the finger utility can show information about user accounts, such as usernames and real names. This exposes personal data that could be useful to attackers. Disable the finger service or restrict its use to trusted users.

Original advisory text
finger 0@host on some systems may print information on some user accounts.
finger 0@host on some systems may print information on some user accounts.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
2% chance of attack within 30 days
Timeline
Published1 Jan 1999
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-1999-0197 · NVD
Track software like this
Free during beta