MIT Kerberos 5 Telnet Daemon Authentication Bypass Vulnerability

Threat level definition

MIT Kerberos 5 Telnet Daemon Authentication Bypass Vulnerability

References:

Kerberos Homepage (MIT)
krb5 security update (RedHat)
MIT krb5 Security Advisory 2007-001 (MIT )
MITKRB5-SA-2007-001: telnetd allows login as arbitrary user [CVE-2007-0956] (tlyu@MIT.EDU)
Sun Alert ID: 102867 - Security Vulnerability in the SEAM Kerberized telnetd(1M) (Sun)
VU#220816: MIT Kerberos 5 telnet daemon allows login as arbitrary user (CERT)

Privacy Statement
Copyright 2008, SecurityFocus