CVE-2001-0609: Infodrom Cfingerd

Critical severity, CVSS 9.8. EPSS: 18.2% chance of exploitation in the next 30 days.

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.

Affected products

• Infodrom Cfingerd: up to and including 1.4.3

Published 2001-08-02. Last modified 2026-06-16.