CVE-2007-0882

Exp

Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.

Published: 2007-02-12 Last update: 2026-04-23 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2007-0882 is rated High Exploit Risk (89.8/100): CVSS Critical severity, with high exploitation likelihood (EPSS 90.96%, 100th percentile). Core evidence: 5 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2007-0882

EDB-ID Source Kind Published Link
16328 exploit_db edb 2010-06-22 Exploit-DB ↗
9918 exploit_db edb 2007-02-12 Exploit-DB ↗
3293 exploit_db edb 2007-02-11 Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2007-0882

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-01-15 91.06% 90.96% -0.10%
2 2025-10-01 91.35% 91.06% -0.29%
3 2025-03-30 91.35%

Full EPSS history (14 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2007-0882

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
10.0 2.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:C)
Complete integrity impact.
Availability impact (A:C)
Complete availability impact.
10.0 10.0 [email protected]

Weakness enumeration for CVE-2007-0882

OS Trackers for CVE-2007-0882

vendor priority summary link
alpine CVE-2007-0882: no source package rows; 0 state rows across 0 repos (none); fixed 0, open 0. https://security.alpinelinux.org/vuln/CVE-2007-0882

Affected software / configurations for CVE-2007-0882

Vendor Product Version Raw CPE
oracle solaris 10 cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*
oracle solaris 11 cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*
sun sunos 5.10 cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*
sun sunos 5.11 cpe:2.3:o:sun:sunos:5.11:*:*:*:*:*:*:*

References for CVE-2007-0882

URL Tags
http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.html Exploit Third Party Advisory
http://isc.sans.org/diary.html?storyid=2220 Exploit Third Party Advisory
http://osvdb.org/31881 Broken Link
http://seclists.org/fulldisclosure/2007/Feb/0217.html Mailing List Third Party Advisory
http://secunia.com/advisories/24120 Broken Link Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102802-1 Broken Link
http://www.kb.cert.org/vuls/id/881872 Third Party Advisory US Government Resource
http://www.securityfocus.com/archive/1/459831/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/459843/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/459855/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/459980/100/0/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/460086/100/100/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/460103/100/100/threaded Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/22512 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1017625 Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA07-059A.html Broken Link Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2007/0560 Broken Link Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32434 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2202 Broken Link
cvelogic Threat Intelligence