CVE-2007-0882

Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

97.85% chance of exploitation in the next 30 days, 100th percentile

Published

2007-02-12

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://isc.sans.org/diary.html?storyid=2220

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/solaris/telnet/fuser.rb

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/16328
• https://www.exploit-db.com/exploits/9918
• https://www.exploit-db.com/exploits/3293

References

• CVE Record
• NVD entry

Related

• CVE-2007-0881
• CVE-2007-0883
• CVE-2007-0873
• CVE-2007-0885
• CVE-2007-0872
• CVE-2007-0886