CVE-2007-0956
- State
- Published
- Severity
- Not scored
- Published
- Apr 6, 2007
- Updated
- Aug 7, 2024
- Reserved
- Feb 14, 2007
Description
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2007-1218vdb-entry
- oval:org.mitre.oval:def:10046vdb-entrysignature
- 20070403 MITKRB5-SA-2007-001: telnetd allows login as arbitrary user [CVE-2007-0956]mailing-list
- 24706third-party-advisory
- 24740third-party-advisory
- RHSA-2007:0095vendor-advisory
- VU#220816third-party-advisory
- 24786third-party-advisory
- TA07-093Bthird-party-advisory
- 20070405 FLEA-2007-0008-1: krb5mailing-list
- DSA-1276vendor-advisory
- 24735third-party-advisory
- kerberos-telnet-security-bypass(33414)vdb-entry
- http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-001-telnetd.txt
- 1017848vdb-entry
- 23281vdb-entry
- 24750third-party-advisory
- 24817third-party-advisory
- 24757third-party-advisory
- 24755third-party-advisory
- ADV-2007-1249vdb-entry
- 102867vendor-advisory
- SUSE-SA:2007:025vendor-advisory
- 24785third-party-advisory
- MDKSA-2007:077vendor-advisory
- USN-449-1vendor-advisory
- 24736third-party-advisory
- 20070404 rPSA-2007-0063-1 krb5 krb5-server krb5-services krb5-test krb5-workstationmailing-list
- GLSA-200704-02vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.