CVE-2007-0882

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 98.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-02-12 · updated 2026-06-16
Weakness: CWE-88

Description

Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.

Affected products

Oracle Corporation Solaris Operating System: 10, 11
Sunos: 5.10, 5.11

References

http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.html
http://isc.sans.org/diary.html?storyid=2220
http://osvdb.org/31881
http://seclists.org/fulldisclosure/2007/Feb/0217.html
http://secunia.com/advisories/24120
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102802-1
http://www.kb.cert.org/vuls/id/881872
http://www.securityfocus.com/archive/1/459831/100/0/threaded
http://www.securityfocus.com/archive/1/459843/100/0/threaded
http://www.securityfocus.com/archive/1/459855/100/0/threaded
http://www.securityfocus.com/archive/1/459980/100/0/threaded
http://www.securityfocus.com/archive/1/460086/100/100/threaded

Get alerted when CVE-2007-0882 or the next vulnerability affects your stack