Displaying 1 result from an estimated 1 matches for "keymask".
Did you mean:
keymasks
1997 May 26
1
FYI: Possible information disclosure in cfingerd.
...WAY.COM.BR>
Approved: alex@yuriev.com
Subject: cfingerd vulnerability
To: BUGTRAQ@NETSPACE.ORG
Hello,
i don''t know if it has been noticed before, but cfingerd installs,
by default, a search service. You can use it as:
finger search.username@host
Thats ok, but you can use keymasks. And if you do:
finger search.*@host
you can get a list of all the users in the system.
I''ve tried it if cfinger 1.2.2 (probably it is not the latest version).
- --
Rodrigo Barbosa (Personal e-mail: rodrigob@darkover.org )
Network Administrator (Work e-mail : rodrigob@morcego...