Lucene search
+L

CVE-2009-0641

🗓️ 18 Feb 2009 17:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 58 Views🌐 WEB

telnetd in FreeBSD 7.x versions allows remote attackers to execute arbitrary code via crafted environment variable

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2009-0641
16 Feb 200900:00
circl
cvelist
Cvelist
CVE-2009-0641
18 Feb 200917:00
cvelist
exploitdb
Exploit DB
FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation
16 Feb 200900:00
exploitdb
euvd
EUVD
EUVD-2009-0644
7 Oct 202500:30
euvd
nessus
Tenable Nessus
FreeBSD telnetd sys_term.c Environment Variable Handling Privilege Escalation (FreeBSD-SA-09:05)
17 Feb 200900:00
nessus
nvd
NVD
CVE-2009-0641
20 Feb 200906:47
nvd
openvas
OpenVAS
FreeBSD Security Advisory (FreeBSD-SA-09:05.telnetd.asc)
18 Feb 200900:00
openvas
prion
Prion
Design/Logic Flaw
20 Feb 200906:47
prion
NVD
Node
OR
freebsdfreebsdMatch7.0beta_4
freebsdfreebsdMatch7.0current
freebsdfreebsdMatch7.0-release
freebsdfreebsdMatch7.0_beta4
freebsdfreebsdMatch7.0_releng
freebsdfreebsdMatch7.1rc1
ParameterPositionPathDescriptionCWE
LD_PRELOADpath/bin/login telnetd sanitization bug allows LD_PRELOAD to be used to preload a malicious library before executing /bin/login.CWE-16CWE-264
environment variablepath/bin/login telnetd sanitization bug allows LD_PRELOAD to be used to preload a malicious library before executing /bin/login.CWE-16CWE-264
LD_PRELOADpath/tmp/libno_ex.so.1.0 attacker uploads a malicious library and points LD_PRELOAD to it to gain code execution/root.CWE-264
library pathpath/tmp/libno_ex.so.1.0 attacker uploads a malicious library and points LD_PRELOAD to it to gain code execution/root.CWE-264

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:05Current
7.8High risk
Vulners AI Score7.8
CVSS 29.3
EPSS0.09321
58