PublicDate: 2007-04-06 01:19:00 UTC Candidate: CVE-2007-0956 References: https://ubuntu.com/security/notices/USN-449-1 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0956 Description: The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_krb5: released (1.4.3-5ubuntu0.6) edgy_krb5: released (1.4.3-9ubuntu1.5) feisty_krb5: released (1.4.4-5ubuntu3.3) devel_krb5: released (1.6.dfsg.1-7) upstream_krb5: needs-triage