CVE-2007-0956

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 29.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-06 · updated 2026-06-16
Weakness: CWE-306

Description

The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.

Affected products

Canonical Ubuntu Linux: 5.10, 6.06, 6.10
Debian Linux: 3.1, 4.0
MIT Kerberos 5: before 1.6.1 — fixed in 1.6.1

How to fix

Upgrade to a fixed version: MIT Kerberos 5 1.6.1. Check the vendor advisory for mitigations.

References

http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html
http://secunia.com/advisories/24706
http://secunia.com/advisories/24735
http://secunia.com/advisories/24736
http://secunia.com/advisories/24740
http://secunia.com/advisories/24750
http://secunia.com/advisories/24755
http://secunia.com/advisories/24757
http://secunia.com/advisories/24785
http://secunia.com/advisories/24786
http://secunia.com/advisories/24817

Get alerted when CVE-2007-0956 or the next vulnerability affects your stack