CVE-2007-0956
HIGH severity · CVSS 10 · Missing authentication
10CVSS HIGH
Summary
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)30%
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc
- http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html
- http://secunia.com/advisories/24706Advisory
- http://secunia.com/advisories/24735Advisory
- http://secunia.com/advisories/24736Advisory
- http://secunia.com/advisories/24740Advisory
- http://secunia.com/advisories/24750Advisory
- http://secunia.com/advisories/24755Advisory