Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

FINGER:EXPLOIT:PIPE

Severity

Minor

Recommended

No

Category

FINGER

Keywords

Pipe

Release Date

2003/04/22

Update Number

1213

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

FINGER: Pipe


This signature detects attempts to exploit the FINGER service. Attackers can send FINGER requests containing the pipe (|) character to execute shell commands.

Extended Description

A version of finger is running that exposes valid user information to any entity on the network.

Affected Products

  • Gnu fingerd
  • Gnu finger_service
  • Microsoft windows_2000
  • Microsoft windows_nt

References

  • BugTraq: 2220
  • CVE: CVE-1999-0612
  • URL: http://securityresponse.symantec.com/avcenter/security/Content/2000_04_26.html

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out