CVE-2026-28372 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) impl…
High CVSS: 7.4

CVE-2026-28372

telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALS_DIRECTORY environment variable, and requires an unprivileged local user to create a login.noauth file.
Vendor
Gnu
Product
Inetutils
CWE
CWE-829
Yayın Tarihi
2026-02-27 06:18:00
Güncelleme
2026-03-07 17:15:51
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-829 Inetutils HIGH Gnu 2026

Referanslar

https://git.hadrons.org/cgit/debian/pkgs/inetutils.git/commit/?id=3953943d8296310485f98963883a798545ab9a6c https://lists.gnu.org/archive/html/bug-inetutils/2026-02/msg00000.html https://lists.gnu.org/archive/html/bug-inetutils/2026-02/msg00012.html https://www.openwall.com/lists/oss-security/2026/02/24/1 http://www.openwall.com/lists/oss-security/2026/02/27/3 http://www.openwall.com/lists/oss-security/2026/03/06/2 http://www.openwall.com/lists/oss-security/2026/03/06/3 http://www.openwall.com/lists/oss-security/2026/03/07/1 http://www.openwall.com/lists/oss-security/2026/03/07/2