CVE-2007-0882
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5...
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.
Exploit likelihood
What each source reports
NVD Score used
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.
- Record
CVE-2007-0882- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-88
- Updated
- 2026-11-02
CVE List No score
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.
- Record
CVE-2007-0882- Updated
- 2026-11-02
EUVDEUVD-2007-0878 No score
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.
- Record
EUVD-2007-0878- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jpgv-x3r5-pm29 No score
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5...
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.
- Record
GHSA-jpgv-x3r5-pm29- Weakness
- CWE-88, CWE-94
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Sun Solaris Telnet - Remote Authentication Bypass (Metasploit) | 2010-06-22 |
| Exploit-DB | SunOS 5.10/5.11 in.TelnetD - Remote Authentication Bypass | 2007-02-11 |
| Exploit-DB | Solaris 10/11 Telnet - Remote Authentication Bypass (Metasploit) | 2007-02-12 |
| Metasploit | Sun Solaris Telnet Remote Authentication Bypass Vulnerability | 2007-02-12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0882 is a high vulnerability (CVSS 10.0) in Oracle Solaris, published February 12, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 98.1%, the 99th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/459843/100/0/threaded
vupen.com/english/advisories/2007/0560
exchange.xforce.ibmcloud.com/vulnerabilities/32434
kb.cert.org/vuls/id/881872
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2202
erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.html
Show 15 moreShow less
secunia.com/advisories/24120
seclists.org/fulldisclosure/2007/Feb/0217.html
securitytracker.com/id?1017625
isc.sans.org/diary.html?storyid=2220
sunsolve.sun.com/search/document.do?assetkey=1-26-102802-1
osvdb.org/31881
us-cert.gov/cas/techalerts/TA07-059A.html
nvd.nist.gov/vuln/detail/CVE-2007-0882
github.com/advisories/GHSA-jpgv-x3r5-pm29