CVE-1999-1165 high

Description

GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (4)

• cve@mitre.org NVD Recent CVEs
• cve@mitre.org NVD Recent CVEs
• cve@mitre.org NVD Recent CVEs
• NVD detail: CVE-1999-1165 NVD Recent CVEs

  GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.

• CVEs and Security Vulnerabilities - OpenCVE
  web:app.opencve.io

  Explore the latest vulnerabilities and security issues in the CVE database

  2026-05-22 20:33 UTC
• CVE Vault - CVE Database & Security Research Hub
  web:cvevault.com

  CVE Vault - Search and explore Common Vulnerabilities and Exposures ( CVE ) database. Find security vulnerabilities by CVE ID, vendor, severity, and year. Stay secure with comprehensive CVE information.

  2026-05-22 20:33 UTC
• New BitUnlocker Attack Bypasses Windows 11 Disk Encryption in Just 5 ...
  web:cyberpress.org

  A newly published proof-of-concept tool called BitUnlocker exposes a dangerous downgrade attack that can bypass Microsoft's BitLocker full-disk encryption on fully patched Windows 11 machines, granting complete access to encrypted drives in under five minutes. The attack exploits CVE -2025-48804, a vulnerability in Windows BitLocker that allows an attacker to mix untrusted data with trusted ...

  2026-05-22 20:33 UTC
• Security Update Guide - Microsoft
  web:portal.msrc.microsoft.com

  The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  2026-05-22 20:33 UTC
• November 2025 Patch Tuesday: Updates and Analysis | CrowdStrike
  web:www.crowdstrike.com

  Microsoft has released security updates for 63 vulnerabilities, including 1 zero-day and 4 critical vulnerabilities, in its November 2025 Patch Tuesday rollout.

  2026-05-22 20:33 UTC
• CVE: Common Vulnerabilities and Exposures
  web:www.cve.org

  At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

  2026-05-22 20:33 UTC
• Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find
  web:www.cvefind.com

  CVE Find is a real-time vulnerability database indexing 351 731 security flaws ( CVE ) from MITRE, NVD, CISA KEV, CWE and CAPEC. 1311 new CVEs were published in the last 7 days. Data aggregated from: MITRE Corporation ( CVE , CWE, CAPEC), National Vulnerability Database - NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).

  2026-05-22 20:33 UTC
• Microsoft November 2025 Security Updates | Windows 11 Forum
  web:www.elevenforum.com

  November 2025 Security Updates This release consists of the following 63 Microsoft CVEs : Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations ? Nuance PowerScribe CVE -2025-30398 Microsoft Configuration Manager CVE -2025-47179 Microsoft Office Excel CVE -2025-59240 SQL...

  2026-05-22 20:33 UTC
• National Vulnerability Database | NIST
  web:www.nist.gov

  NIST maintains the National Vulnerability Database (NVD), a repository of information on software and hardware flaws that can compromise computer security. This is a key piece of the nation's cybersecurity infrastructure.

  2026-05-22 20:33 UTC
• VirusTotal - Home
  web:www.virustotal.com

  VirusTotal is a platform for scanning files and URLs for viruses, malware, and other threats using multiple antivirus engines.

  2026-05-22 20:33 UTC

Only Available for Registered Users. Sign in to view.