The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.318
EPSS Ranking 96.5%