177 matches found
CVE-2026-32772
CVE-2026-32772 affects the inetutils telnet implementation (GNU inetutils) up to version 2.7. The issue allows a server to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR, leading to information disclosure. Debians advisories (DSA-6193-1, dla-4527-1) note that fixes...
CVE-2026-32746
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC Set Local Characters suboption handler because addslc does not check whether the buffer is full...
CVE-2026-32746: Buffer Copy without Checking Size of Input
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC Set Local Characters suboption handler because addslc does not check whether the buffer is full...
GNU Inetutils 安全漏洞
GNU Inetutils are a set of common network programs from the GNU community in the United States. Versions of GNU Inetutils 2.7 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the addslc function in the LINEMODE SLC sub-program, which did not check whether the...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Gnu Inetutils
CVE-2026-28372: GNU inetutils telnetd Privilege Escalation !...
Exploit for Argument Injection in Gnu Inetutils
telnetd Idk wh...
EUVD-2026-9000
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login1 implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALSDIRECTORY environment variable, and require...
CVE-2026-28372
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login1 implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALSDIRECTORY environment variable, and require...
CVE-2026-28372
CVE-2026-28372 affects telnetd in GNU inetutils up to version 2.7. The root cause is that login(1) in util-linux 2.40 added systemd service credentials support, enabling a local unprivileged user to influence the CREDENTIALS_DIRECTORY environment variable and create a login.noauth file, which can...
CVE-2026-28372: Inclusion of Functionality from Untrusted Control Sphere
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login1 implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALSDIRECTORY environment variable, and require...
GNU Inetutils 安全漏洞
GNU Inetutils are a set of common network programs from the GNU community in the United States. Versions of GNU Inetutils 2.7 and earlier contained security vulnerabilities, which were caused by defects in the telnetd program, potentially leading to privilege escalation...
CVE-2026-28372
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login1 implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALSDIRECTORY environment variable, and require...
Exploit for Argument Injection in Gnu Inetutils
!Authorhttps://img.shields.io/badge/Author-Mohammed%20Idrees%...
📄 GNU Inetutils 2.7 Authentication Bypass
GNU Inetutils version 2.7 telnet authentication bypass proof of concept exploit written in PHP. ============================================================================================================================================= | Title : GNU Inetutils Telnet Authentication Bypass PHP...
Exploit for Argument Injection in Gnu Inetutils
No d...
📄 GNU Inetutils Telnet Authentication Bypass
A Metasploit module has been released that exploit telnetd. The telnetd service from GNU InetUtils is vulnerable to authentication bypass, tracked as CVE-2026-24061, in versions up to version 2.7. During Telnet authentication the SB byte can be sent to indicate sub-negotiation which allows for th...
Exploit for Argument Injection in Gnu Inetutils
CVE-2026-24061 Scanner – GNU inetutils telnetd Auth Bypass...
Exploit for Argument Injection in Gnu Inetutils
https://github.com/SafeBreach-Labs/CVE-2026-24061/blob/main/t...