CVE-1999-0198

Summary

CVE-1999-0198 is a vulnerability affecting some systems where using the "finger @host" command may disclose sensitive information about user accounts, including usernames and login status. This issue can potentially be exploited by unauthorized users to gain valuable information, enabling further attacks. The vulnerability stems from a lack of proper access control in the "finger" service, allowing unauthenticated requests to yield user information. It is recommended that affected systems either disable the "finger" service or implement proper access controls to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.