Every CVE Search/ Get API key

CVE-1999-0612

A version of finger is running that exposes valid user information to any entity on the network.

0.0 LowFix available

A version of finger is running that exposes valid user information to any entity on the network.

Exploit likelihood

68.0%Up 34.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 0.0

A version of finger is running that exposes valid user information to any entity on the network.

Record
CVE-1999-0612
CVSS 2.0
0.0 LowAV:N/AC:L/Au:N/C:N/I:N/A:N
Updated
2026-11-02
CVE List No score

A version of finger is running that exposes valid user information to any entity on the network.

Record
CVE-1999-0612
Updated
2026-11-02
EUVDEUVD-1999-0595 No score

A version of finger is running that exposes valid user information to any entity on the network.

Record
EUVD-1999-0595
Updated
2026-11-03
GitHub AdvisoriesGHSA-8873-vgfq-r935 No score

A version of finger is running that exposes valid user information to any entity on the network.

A version of finger is running that exposes valid user information to any entity on the network.

Record
GHSA-8873-vgfq-r935
Updated
2026-11-02
OSVAZL-6422 No score

CVE-1999-0612 affecting package finger for versions less than 0.17-4

A version of finger is running that exposes valid user information to any entity on the network.

Record
AZL-6422
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
finger
Azure Linux:2
before 0.17-4
0.17-4

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-1999-0612 is a low vulnerability (CVSS 0.0) in Gnu Finger Service, published March 1, 1997. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 68.0%, the 99th percentile. Fixed in finger 0.17-4.

References

MoveEnter Open