CVE-2007-0882

CVE-2007-0882 is a critical-severity vulnerability in Oracle Solaris with a CVSS 2.0 base score of 10.0. Its EPSS exploit-prediction score of 98% places it in the 100th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-88.

Key facts

• Severity: Critical (CVSS 2.0 base score 10.0)
• EPSS exploit prediction: 98% (100th percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-88
• Affected product: Oracle Solaris
• Published: 2007-02-12
• Last modified: 2026-06-16

Description

Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.

Frequently asked questions

What is CVE-2007-0882?

Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.

How severe is CVE-2007-0882?

CVE-2007-0882 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2007-0882 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 98% (100th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-0882?

CVE-2007-0882 primarily affects Oracle Solaris. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-0882?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2007-0882 published?

CVE-2007-0882 was published on 2007-02-12 and last updated on 2026-06-16.

References

• http://erratasec.blogspot.com/2007/02/trivial-remote-solaris-0day-disable.html
• http://isc.sans.org/diary.html?storyid=2220
• http://osvdb.org/31881
• http://seclists.org/fulldisclosure/2007/Feb/0217.html
• http://secunia.com/advisories/24120
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102802-1
• http://www.kb.cert.org/vuls/id/881872
• http://www.securityfocus.com/archive/1/459831/100/0/threaded
• http://www.securityfocus.com/archive/1/459843/100/0/threaded
• http://www.securityfocus.com/archive/1/459855/100/0/threaded
• http://www.securityfocus.com/archive/1/459980/100/0/threaded
• http://www.securityfocus.com/archive/1/460086/100/100/threaded
• http://www.securityfocus.com/archive/1/460103/100/100/threaded
• http://www.securityfocus.com/bid/22512
• http://www.securitytracker.com/id?1017625
• http://www.us-cert.gov/cas/techalerts/TA07-059A.html
• http://www.vupen.com/english/advisories/2007/0560
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32434
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2202

Affected products (4)

• cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*
• cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*
• cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*
• cpe:2.3:o:sun:sunos:5.11:*:*:*:*:*:*:*

More vulnerabilities in Oracle Solaris

• CVE-2026-46978 — Critical (CVSS 10.0): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The…
• CVE-2020-14871 — Critical (CVSS 10.0): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported…
• CVE-2017-3623 — Critical (CVSS 10.0): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC). For supported…
• CVE-2015-8104 — Critical (CVSS 10.0): The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a…
• CVE-2015-4486 — Critical (CVSS 10.0): The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote…
• CVE-2015-4485 — Critical (CVSS 10.0): Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox…

All CVEs affecting Oracle Solaris →

Other CWE-88 (Argument Injection) vulnerabilities

• CVE-2026-57572 — Critical (CVSS 10.0): Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted…
• CVE-2026-40281 — Critical (CVSS 10.0): Gotenberg is a Docker-powered stateless API for PDF files. In versions 8.30.1 and earlier, the metadata write endpoint…
• CVE-2023-6269 — Critical (CVSS 10.0): An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify…
• CVE-2004-0480 — Critical (CVSS 10.0): Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via…
• CVE-1999-0113 — Critical (CVSS 10.0): Some implementations of rlogin allow root access if given a -froot parameter.
• CVE-2026-47365 — Critical (CVSS 9.9): Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote…

Browse all CWE-88 (Argument Injection) vulnerabilities →