Описание
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 2:2.7-2ubuntu1 |
| esm-apps/bionic | released | 2:1.9.4-3ubuntu0.1+esm4 |
| esm-apps/focal | released | 2:1.9.4-11ubuntu0.2+esm3 |
| esm-apps/jammy | released | 2:2.2-2ubuntu0.2 |
| esm-apps/xenial | released | 2:1.9.4-1ubuntu0.1~esm5 |
| esm-infra-legacy/trusty | not-affected | code not present |
| jammy | released | 2:2.2-2ubuntu0.2 |
| noble | released | 2:2.5-3ubuntu4.1 |
| questing | released | 2:2.6-1ubuntu3.1 |
| upstream | released | 2:2.7-2 |
Показывать по
10
Ссылки на источники
9.8 Critical
CVSS3
Связанные уязвимости
CVSS3: 9.8
nvd
2 месяца назад
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
CVSS3: 9.8
debian
2 месяца назад
telnetd in GNU Inetutils through 2.7 allows remote authentication bypa ...
CVSS3: 9.8
github
2 месяца назад
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
CVSS3: 9.8
fstec
2 месяца назад
Уязвимость сервера telnetd пакета сетевых программ Inetutils, позволяющая нарушителю обойти существующие механизмы безопасности
9.8 Critical
CVSS3