Slashdot Mirror

← Back to Stories (view on slashdot.org)

Solaris Telnet 0-day vulnerability

Posted by Hemos on from the frantically-trying-to-fix dept.

philos writes "According to SANS ISC, there's a vulnerability in Solaris 10 and 11 telnet that allows anyone to remotely connect as any account, including root, without authentication. Remote access can be gained with nothing more than a telnet client. More information and a Snort signature can be found at riosec.com. Worse, this is almost identical to a bug in AIX and Linux rlogin from way back in 1994."

8 of 342 comments (clear)

  1. Here come the fanboys by Anonymous Coward · · Score: 0, Funny

    Cue the "It's still more secure than Windows!" comments.

  2. Ha! by Anonymous Coward · · Score: 0, Funny

    See? Your "Linux" thing has more vulnerabilites than Vista! Ha! Yes! I win!

    -Bill Gates

  3. Re:Why is this a big deal? by imikem · · Score: 5, Funny

    Relevant line from /etc/services:

    telnet 23/tcp imadumbass hackmenow rootrus rotflmao

    --
    Perscriptio in manibus tabellariorum est.
  4. Re:Why is this a big deal? by teslar · · Score: 5, Funny

    I do. And then I sit down naked in the snow and castigate myself with a 9-tail as a punishment for these impure thoughts.

    Having said that, today is a good day to find out if that head of IT you never liked anyway has telnet enabled on one of his Solaris machines :)

  5. Who uses telnet these days? by deevnil · · Score: 3, Funny

    towel.blinkenlights.nl, that's who.

  6. Re:Telnet? Useless... by Anonymous Coward · · Score: 1, Funny

    ...

    That was the worst comment I've ever read. If someone wants to know about telnet, they can look it up on wikipedia. It even includes a section on security of telnet.

  7. I just got this in my inbox from Microsoft by kentrel · · Score: 2, Funny
    To: You Unix Communists
    From: Steve Ballmer
    Subject: Pwned
    Body:
    Microsoft:1 - Unix: NIL LOLOLOLOLOLOL!!!!!!!111


    :)
    Love Steviepoo

  8. Re:Why is this a big deal? by Anonymous Coward · · Score: 1, Funny

    What's wrong with telnet? I use it to manage my anonymous FTP servers...