CVE-2001-0609

This exploit targets a format string vulnerability in cfingerd <= 1.4.3, allowing remote code execution as root. It binds a fake identd server to manipulate the username field and brute-forces the EIP address to execute shellcode.

This exploit leverages a format string vulnerability in cfingerd's logging facility to achieve remote code execution as root. It uses a fake identd server to manipulate the username field and trigger the vulnerability, leading to arbitrary code execution.