CVE-2007-4310

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-13 · updated 2026-06-16

Description

The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a "finger 9@host" command, a different vulnerability than CVE-2001-1503.

Affected products

Sunos: 5.7, 5.8, 5.9

References

http://securityreason.com/securityalert/2996
http://www.securityfocus.com/archive/1/474858/100/100/threaded
http://www.securityfocus.com/archive/1/474927/100/100/threaded
http://securityreason.com/securityalert/2996
http://www.securityfocus.com/archive/1/474858/100/100/threaded
http://www.securityfocus.com/archive/1/474927/100/100/threaded

Get alerted when CVE-2007-4310 or the next vulnerability affects your stack