CVE-1999-0813: Infodrom Cfingerd

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.

Affected products

• Infodrom Cfingerd: up to and including 1.4.0

Published 1999-08-10. Last modified 2026-06-16.