CVE Feed

    Dashboard / CVE / CVE-2007-0882

    CVE-2007-0882

    Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.

    Published:Feb 12, 2007
    Last Modified:Apr 23, 2026
    EPS:Feb 12, 2007
    EPSS Score:0.90964
    CVSS Score:10

    Affected Products

    Vendor
    Oracle
    Product
    Solaris
    Vendor
    Sun
    Product
    Sunos

    Exploits

    http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.htmlhttp://isc.sans.org/diary.html?storyid=2220http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.htmlhttp://isc.sans.org/diary.html?storyid=2220https://www.exploit-db.com/exploits/9918https://www.exploit-db.com/exploits/16328https://www.exploit-db.com/exploits/3293

    Related CVEs

    CVE-2026-13476 (CVSS 7.3) — IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary co…
    CVE-2026-13367 (CVSS 7.8) — IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit s…
    CVE-2026-61202 (CVSS 7.5) — Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that a…
    CVE-2026-61052 (CVSS 5.5) — Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported versio…
    CVE-2026-60834 (CVSS 7.1) — Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version th…
    CVE-2026-60833 (CVSS 7) — Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version th…
    CVE-2026-60661 (CVSS 7.8) — Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported versio…
    CVE-2026-60659 (CVSS 7.1) — Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported versio…
    CVE-2026-46978 (CVSS 10) — Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The…
    CVE-2026-46914 (CVSS 7.1) — Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version…

    References

    http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.html
    http://isc.sans.org/diary.html?storyid=2220
    http://osvdb.org/31881
    http://seclists.org/fulldisclosure/2007/Feb/0217.html
    http://secunia.com/advisories/24120
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-102802-1
    http://www.kb.cert.org/vuls/id/881872
    http://www.securityfocus.com/archive/1/459831/100/0/threaded
    http://www.securityfocus.com/archive/1/459843/100/0/threaded
    http://www.securityfocus.com/archive/1/459855/100/0/threaded
    http://www.securityfocus.com/archive/1/459980/100/0/threaded
    http://www.securityfocus.com/archive/1/460086/100/100/threaded
    http://www.securityfocus.com/archive/1/460103/100/100/threaded
    http://www.securityfocus.com/bid/22512
    http://www.securitytracker.com/id?1017625
    http://www.us-cert.gov/cas/techalerts/TA07-059A.html
    http://www.vupen.com/english/advisories/2007/0560
    https://exchange.xforce.ibmcloud.com/vulnerabilities/32434
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2202
    http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.html
    http://isc.sans.org/diary.html?storyid=2220
    http://osvdb.org/31881
    http://seclists.org/fulldisclosure/2007/Feb/0217.html
    http://secunia.com/advisories/24120
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-102802-1
    http://www.kb.cert.org/vuls/id/881872
    http://www.securityfocus.com/archive/1/459831/100/0/threaded
    http://www.securityfocus.com/archive/1/459843/100/0/threaded
    http://www.securityfocus.com/archive/1/459855/100/0/threaded
    http://www.securityfocus.com/archive/1/459980/100/0/threaded
    http://www.securityfocus.com/archive/1/460086/100/100/threaded
    http://www.securityfocus.com/archive/1/460103/100/100/threaded
    http://www.securityfocus.com/bid/22512
    http://www.securitytracker.com/id?1017625
    http://www.us-cert.gov/cas/techalerts/TA07-059A.html
    http://www.vupen.com/english/advisories/2007/0560
    https://exchange.xforce.ibmcloud.com/vulnerabilities/32434
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2202

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High