203 matches found
Exploit for CVE-2026-32746
CVE-2026-32746 - telnetd LINEMODE SLC Buffer Overflow Pre-aut...
Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE
Cybersecurity researchers have disclosed a critical security flaw impacting the GNU InetUtils telnet daemon telnetd that could be exploited by an unauthenticated remote attacker to execute arbitrary code with elevated privileges. The vulnerability, tracked as CVE-2026-32746 , carries a CVSS score...
CVE-2026-32746
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC Set Local Characters suboption handler because addslc does not check whether the buffer is full...
Exploit for CVE-2026-28372
CVE-2026-28372 — GNU inetutils telnetd Privilege Escalation Po...
CVE-2026-28372
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login1 implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALSDIRECTORY environment variable, and require...
CVE-2026-28372
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login1 implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALSDIRECTORY environment variable, and require...
CVE-2026-28372
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login1 implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALSDIRECTORY environment variable, and require...
Exploit for CVE-2026-24061
CVE-2026-24061 Proof of Concept PoC ⚠️ DISCLAIMER: EDUCA...
GLSA-202601-01 : inetutils: Remote Code Execution
The remote host is affected by the vulnerability described in GLSA-202601-01 inetutils: Remote Code Execution The telnetd server invokes /usr/bin/login normally running as root passing the value of the USER environment variable received from the client as the last parameter. If the client supply ...
Exploit for CVE-2026-24061
CVE-2026-24061 GNU inetutils-telnetd - Remote Authenticati...
Exploit for CVE-2026-24061
CVE-2026-24061 GNU inetutils-telnetd Remote Authentication By...
PT-2026-3756
Name of the Vulnerable Software and Affected Versions GNU Inetutils versions 1.9.3 through 2.7 Description An argument injection flaw exists in the telnetd server due to improper neutralization of argument separators when processing the USER environment variable. A remote attacker can bypass...
MiracleLinux 4 : krb5-appl-1.0.1-7.AXS4 (AXSA:2012-28:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-28:01 advisory. This package contains Kerberos-aware versions of the telnet, ftp, rcp, rsh, and rlogin clients and servers. While these have been replaced by tools such as...
Astra Linux – Vulnerability in inetutils
In GNU Inetutils, telnetd in version 2.7 allows remote authentication bypass by using the -f root value for the USER environment variable...
CVE-2019-11320
In Motorola CX2 1.01 and M2 1.01, users can access the router's /privmgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address...
EUVD-2000-0267
Malware in sbrugna...
EUVD-2011-4440
Malware in sbrugna...
EUVD-2003-1059
Malware in sbrugna...