Anybody know about the new telnet exploit?

[toolman]

My host told me to use ssh because they had to turn off telnet because of a new remote exploit. Anybody know what's up?

[evinrude]

You can read the Advisory [securityfocus.com] from Bugtraq, which explains it pretty well. Sample, or proof of concept, code has shown up there as well. The advisory states that this is actively being exploited at this time.

'course Bugtraq is currently chock full of SSH3 discussions at the moment, too. :)

[satanclaus]

oops

(edited by: satanclaus at 7:44 pm (gmt) on July 24, 2001

[satanclaus]

[theregister.co.uk...]

An article concerning the use of this exploit by the Notorious Fluffi Bunny. There is also a link to a page explaining the exploit.