| Package | Affected versions | Patched versions |
|---|---|---|
| inetutils | ≤ 2.7 |
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALS_DIRECTORY environment variable, and requires an unprivileged local user to create a login.noauth file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free