Secunia

akfingerd has been found vulnerable to multiple issues.

Remote Denial of Service, open a connection do not close it, while doing so nobody else can connect

Local user can do Denial of Service by symlinking his .plan file to /dev/urandom, next time his users is fingered the service will crash

akfingerd does not check for symlinked files, allowing local users to read any file owned by user nobody

akfingerd does not drop group privileges, thus any file which root group has read access to maybe read

Solution
No update is available. The product does not seem supported anymore, we recommend that you use a different fingerd (if you need it at all).
Further details available in Customer Area

Provided and/or discovered by
Gianni Tedesco

Deep Links
Links available in Customer Area