CVE-2013-1049: Buffer overflow in the RFC1413 (ident) client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service (crash) and possibly execute…

PriorityP343critical10CVSS 2.0

AVNACLAuNCCICAC

EPSS

3.13%

86.2th percentile

Buffer overflow in the RFC1413 (ident) client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted response.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	cfingerd	< cfingerd 1.4.3-3.1 (bookworm)	cfingerd 1.4.3-3.1 (bookworm)
debian	cfingerd	—	—
infodrom	cfingerd	>= 0 < 1.4.3-3.1	1.4.3-3.1
infodrom	cfingerd	>= 0 < 1.4.3-3.1	1.4.3-3.1
infodrom	cfingerd	>= 0 < 1.4.3-3.1	1.4.3-3.1
infodrom	cfingerd	>= 0 < 1.4.3-3.1	1.4.3-3.1

CVSS provenance

nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C

osv10.0CRITICAL

vendor_debian10.0CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.