CVE-2007-0882
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 98.0%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.
Description
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 98.01% probability · 100th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-88
- Affected
- oracle/solaris · sun/sunos
- Source
- cve@mitre.org
References
- http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.htmlExploit, Third Party Advisory
- http://isc.sans.org/diary.html?storyid=2220Exploit, Third Party Advisory
- http://osvdb.org/31881Broken Link
- http://seclists.org/fulldisclosure/2007/Feb/0217.htmlMailing List, Third Party Advisory
- http://secunia.com/advisories/24120Broken Link, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102802-1Broken Link
- http://www.kb.cert.org/vuls/id/881872Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/459831/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/459843/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/459855/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/459980/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/460086/100/100/threadedBroken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/460103/100/100/threadedBroken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/22512Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1017625Broken Link, Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA07-059A.htmlBroken Link, Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2007/0560Broken Link, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32434Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2202Broken Link
- http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.htmlExploit, Third Party Advisory
- http://isc.sans.org/diary.html?storyid=2220Exploit, Third Party Advisory
- http://osvdb.org/31881Broken Link
- http://seclists.org/fulldisclosure/2007/Feb/0217.htmlMailing List, Third Party Advisory
- http://secunia.com/advisories/24120Broken Link, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102802-1Broken Link
- http://www.kb.cert.org/vuls/id/881872Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/459831/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/459843/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/459855/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/459980/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.