NVD

Id
53098  
Name
CVE-2007-0882  
Description
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-02-12  
Modified Date
2011-06-13  
Seq
2007-0882  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
268502 53098 CVE-2007-0882 http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.html  View
268503 53098 CVE-2007-0882 http://isc.sans.org/diary.html?storyid=2220  View
268504 53098 CVE-2007-0882 3293  View
268505 53098 CVE-2007-0882 oval:org.mitre.oval:def:2202  View
268506 53098 CVE-2007-0882 20070211 "0day was the case that they gave me"  View
268507 53098 CVE-2007-0882 102802  View
268508 53098 CVE-2007-0882 VU#881872  View
268509 53098 CVE-2007-0882 20070212 Re: [Full-disclosure] Solaris telnet vulnberability - how many on your network?  View
268510 53098 CVE-2007-0882 20070212 Solaris telnet vulnberability - how many on your network?  View
268511 53098 CVE-2007-0882 20070212 Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?  View
268512 53098 CVE-2007-0882 20070213 Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?  View
268513 53098 CVE-2007-0882 20070214 Solaris telnet vuln solutions digest and network risks  View
268514 53098 CVE-2007-0882 20070214 RE: [Full-disclosure] Solaris telnet vulnberability - how many onyour network?  View
268515 53098 CVE-2007-0882 22512  View
268516 53098 CVE-2007-0882 1017625  View
268517 53098 CVE-2007-0882 TA07-059A  View
268518 53098 CVE-2007-0882 ADV-2007-0560  View
268519 53098 CVE-2007-0882 solaris-telnet-authentication-bypass(32434)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51474 JVNDB-2007-000136 Sun Solaris の in.telnetd におけるログイン認証回避の脆弱性 Sun Solaris の in.telnetd には、正規のユーザ名に文字列 "-f" を含む USER 環境変数の誤った解釈により、ログイン認証が回避可能となる問題が存在します。 CVE-2007-0882 24237 CVE-2007-0882 53098 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000136.html 2007-02-12 2007-04-01 View