Vulnerability Development mailing list archives

Re: report finger gives long list of users


From: olle <olle () NXS SE>
Date: Wed, 28 Mar 2001 15:50:35 +0200

On Wed, Mar 28, 2001 at 11:19:23AM +0800, warning3 wrote:
If you use digits as username, Solaris "finger" will list the users who have not
configured full name in /etc/passwd.

Right, what the code does, exactly is skip any trailing digits
when matching against the gecos field (to skip room/phone #s?).

Ergo, "1" matches "". You don't need to specify several numerals,
as it makes no difference. Handy feature though...

/olle


Current thread: