← Database

CVE-2007-0956

CRITICAL CVSS: 10.0 Published: 2007-04-06 Modified: 2026-06-16

Description

The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.

Affected Platforms

Debian Debian LinuxMit Kerberos 5Canonical Ubuntu Linux

Weakness Type

CWE-306

References