## Description

Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### infodrom - cfingerd

Affected Versions:

- *

## References

- https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0813
- https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0813

Neural Processor Active