CVE-2007-0882

N/A Unknown

Published: February 12, 2007 Modified: April 23, 2026

Description

Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.html

Source: cve@mitre.org

Exploit Third Party Advisory

http://isc.sans.org/diary.html?storyid=2220

Source: cve@mitre.org

Exploit Third Party Advisory

http://osvdb.org/31881

Source: cve@mitre.org

Broken Link

http://seclists.org/fulldisclosure/2007/Feb/0217.html

Source: cve@mitre.org

Mailing List Third Party Advisory

http://secunia.com/advisories/24120

Source: cve@mitre.org

Broken Link Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102802-1

Source: cve@mitre.org

Broken Link

http://www.kb.cert.org/vuls/id/881872

Source: cve@mitre.org

Third Party Advisory US Government Resource

http://www.securityfocus.com/archive/1/459831/100/0/threaded

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.securityfocus.com/archive/1/459843/100/0/threaded

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.securityfocus.com/archive/1/459855/100/0/threaded

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.securityfocus.com/archive/1/459980/100/0/threaded

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.securityfocus.com/archive/1/460086/100/100/threaded

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.securityfocus.com/archive/1/460103/100/100/threaded

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.securityfocus.com/bid/22512

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.securitytracker.com/id?1017625

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.us-cert.gov/cas/techalerts/TA07-059A.html

Source: cve@mitre.org

Broken Link Third Party Advisory US Government Resource

http://www.vupen.com/english/advisories/2007/0560

Source: cve@mitre.org

Broken Link Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32434

Source: cve@mitre.org

Third Party Advisory VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2202

Source: cve@mitre.org

Broken Link

http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.html