CVE-2000-0915 Information disclosure in n/a
Remote attackers can read arbitrary files on FreeBSD systems by exploiting the fingerd service, requiring immediate patching.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2000-0915?
CVE-2000-0915 is a medium-severity vulnerability in Freebsd Freebsd, published on 22 Jan 2001. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.
Which versions are affected by CVE-2000-0915?
It affects 1 product.
Products include Freebsd Freebsd.
How do I fix CVE-2000-0915?
No fix has been published for CVE-2000-0915 yet. Limit exposure of the affected software until one is available.
Is CVE-2000-0915 being exploited?
There is no known exploitation of CVE-2000-0915 in the wild and no public exploit code.
Other vulnerabilities in Freebsd Freebsd
Sources
Also known as GHSA-2cwr-cqcg-933x.