FINGER_Zero Query

 

Code: p74

Severity: Warning

 

Description: An intelligence gathering attack against the finger daemon

Impact: The attacker may obtain information about user accounts on the target system. Corrective Disable the finger daemon or limit the addresses that can access the service via firewall or TCP wrappers. Code:p75 Name:FINGER_W_Pipe Description: This event is generated when a remote command execution exploit against a finger daemon is attempted. Impact: The attacker may be presented with the opportunity to run a command of his choice on the target UNIX system

Corrective: Disable the finger daemon or limit the addresses that can access the service via firewall or TCP wrappers.