CVE-2007-0956

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

29.84%

Published

Apr 6, 2007

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.

Weaknesses (CWE)

CWE-306

Affected Products (6)

mit · kerberos_5 (up to 1.6.1)vulnerable

debian · debian_linuxvulnerable

canonical · ubuntu_linuxvulnerable

References (20)

ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc

Broken Link

http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html

Broken Link

http://secunia.com/advisories/24706

Third Party Advisory

http://secunia.com/advisories/24735

Third Party Advisory

http://secunia.com/advisories/24736

Third Party Advisory

http://secunia.com/advisories/24740

Third Party Advisory

http://secunia.com/advisories/24750

Third Party Advisory

http://secunia.com/advisories/24755

Third Party Advisory

http://secunia.com/advisories/24757

Third Party Advisory

http://secunia.com/advisories/24785

Third Party Advisory

http://secunia.com/advisories/24786

Third Party Advisory

http://secunia.com/advisories/24817

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200704-02.xml

Third Party Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102867-1

Broken Link

http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-001-telnetd.txt

Vendor Advisory

http://www.debian.org/security/2007/dsa-1276

Third Party Advisory

http://www.kb.cert.org/vuls/id/220816

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2007:077

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0095.html

Third Party Advisory

http://www.securityfocus.com/archive/1/464590/100/0/threaded

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs