CVE-2007-0882

no score yetEPSS 98%

No CVSS score yet. EPSS 98% chance of exploitation in the next 30 days.

Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.

EPSS: 98% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-88
Published: 2007-02-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

oracle:solaris
sun:sunos

References

http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.html
http://isc.sans.org/diary.html?storyid=2220
http://osvdb.org/31881
http://seclists.org/fulldisclosure/2007/Feb/0217.html
http://secunia.com/advisories/24120

Check your stack JSON