CVE-2007-0882
NoneCVSS
—
EPSS
98.0%
Published
Feb 12, 2007
CISA due date
—
The record
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79675 NLTK before 3.10.3 fails to validate JVM options passed through the per-call options… CWE-88
- CVE-2026-78676 GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during… CWE-88
- CVE-2026-78678 GitPython versions before 3.1.59 contain an incomplete denylist in the… CWE-88
- CVE-2026-76219 GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in… CWE-88
- CVE-2026-76218 GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that… CWE-88
- CVE-2026-76220 GitPython before 3.1.58 contains a command execution vulnerability in the… CWE-88
- CVE-2026-73624 GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the… CWE-88
- CVE-2026-73621 GitPython before 3.1.56 contains an argument injection vulnerability in the… CWE-88