CVE-2007-0956
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass...
10.0 HighFix available
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
Exploit likelihood
30.2%Up 25.8 points since Feb 4, 2022
What each source reports
NVD Score used
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
- Record
CVE-2007-0956- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-306
- Updated
- 2026-11-02
CVE List No score
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
- Record
CVE-2007-0956- Updated
- 2026-11-02
EUVDEUVD-2007-0950 No score
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
- Record
EUVD-2007-0950- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gcgf-6qp7-hmmv No score
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass...
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
- Record
GHSA-gcgf-6qp7-hmmv- Weakness
- CWE-306
- Updated
- 2026-11-02
OSV No score
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
- Record
CVE-2007-0956- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-0956 No score
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
- Record
DEBIAN-CVE-2007-0956- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10899-1 No score
krb5-1.19.2-2.2 on GA media
These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10899-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:12 |
before 1.4.4-8 | 1.4.4-8 |
krb5Debian:13 |
before 1.4.4-8 | 1.4.4-8 |
krb5Debian:14 |
before 1.4.4-8 | 1.4.4-8 |
krb5Debian:3.1 From an advisory covering 3 CVEs |
before 1.3.6-2sarge4, plus listed versions 1.3.6-21.3.6-2sarge11.3.6-2sarge21.3.6-2sarge3 |
1.3.6-2sarge4 |
krb5Debian:4.0 From an advisory covering 3 CVEs |
before 1.4.4-7etch1 | 1.4.4-7etch1 |
krb5Red Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-libsRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-serverRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-workstationRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
Show 78 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5Red Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-libsRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-serverRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-workstationRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5Red Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-libsRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-serverRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-workstationRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5Red Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-libsRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-serverRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-workstationRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5Red Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-libsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-serverRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-workstationRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5Red Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-workstationRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5Red Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-libsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-serverRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-workstationRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5Red Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-libsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-serverRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-workstationRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-libsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-serverRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-workstationRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-workstationRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-libsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-serverRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-workstationRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-libsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-serverRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-workstationRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-libsRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-workstationRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-develRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-libsRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-serverRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-workstationRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5openSUSE:Tumbleweed From an advisory covering 20 CVEs |
before 1.19.2-2.2 | 1.19.2-2.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0956 is a high vulnerability (CVSS 10.0) in Canonical Ubuntu Linux, published April 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 30.2%, the 98th percentile. Fixed in krb5 1.4.4-8.
References
vupen.com/english/advisories/2007/1218
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10046
securityfocus.com/archive/1/464590/100/0/threaded
secunia.com/advisories/24706
redhat.com/support/errata/RHSA-2007-0095.html
Show 60 moreShow less
kb.cert.org/vuls/id/220816
us-cert.gov/cas/techalerts/TA07-093B.html
debian.org/security/2007/dsa-1276
exchange.xforce.ibmcloud.com/vulnerabilities/33414
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-001-telnetd.txt
securitytracker.com/id?1017848
sunsolve.sun.com/search/document.do?assetkey=1-26-102867-1
lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html
mandriva.com/security/advisories?name=MDKSA-2007:077
ubuntu.com/usn/usn-449-1
security.gentoo.org/glsa/glsa-200704-02.xml
nvd.nist.gov/vuln/detail/CVE-2007-0956
github.com/advisories/GHSA-gcgf-6qp7-hmmv
security-tracker.debian.org/tracker/CVE-2007-0956
access.redhat.com/errata/RHSA-2007:0095
bugzilla.redhat.com/show_bug.cgi?id=229782
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0095.json
cve.org/CVERecord?id=CVE-2007-0956
suse.com/security/cve/CVE-2006-6143