CVE-2007-0956

The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.

🔗 References (60)

• cve@mitreftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc
• cve@mitrehttp://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html
• cve@mitrehttp://secunia.com/advisories/24706
• cve@mitrehttp://secunia.com/advisories/24735
• cve@mitrehttp://secunia.com/advisories/24736
• cve@mitrehttp://secunia.com/advisories/24740
• cve@mitrehttp://secunia.com/advisories/24750
• cve@mitrehttp://secunia.com/advisories/24755
• cve@mitrehttp://secunia.com/advisories/24757
• cve@mitrehttp://secunia.com/advisories/24785
• cve@mitrehttp://secunia.com/advisories/24786
• cve@mitrehttp://secunia.com/advisories/24817
• cve@mitrehttp://security.gentoo.org/glsa/glsa-200704-02.xml
• cve@mitrehttp://sunsolve.sun.com/search/document.do?assetkey=1-26-102867-1
• cve@mitrehttp://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-001-telnetd.txt