Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname that is obtained via a reverse DNS lookup.
| Software | From | Fixed in |
|---|---|---|
| efingerd / efingerd | 1.3 | 1.3.x |
| efingerd / efingerd | 1.6.1 | 1.6.1.x |