full-disclosure - Microsoft Windows and *nix Telnet Port NumberArgument Obfuscation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200506080805.j5885F48021922@smtp-vbr12.xs4all.nl>
Date: Wed Jun  8 09:05:33 2005
From: dj_noresult at xs4all.nl (Arjan van der Velde)
Subject: Microsoft Windows and *nix Telnet Port
	NumberArgument Obfuscation

Hi,

I like reading posts in here to learn from. It would be good not to be too
hostile against people asking questions you already know the answer for or
even have known it for ages already. If I were to ask a question I would
like to be educated or at least pointed in the right direction. Some replies
really discourage people from asking.

- Arjan 

-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of Andrew
Haninger
Sent: Wednesday, June 08, 2005 9:08
To: nick@...us-l.demon.co.uk
Cc: Full Disclosure
Subject: Re: [Full-disclosure] Microsoft Windows and *nix Telnet Port
NumberArgument Obfuscation

On 6/7/05, Nick FitzGerald <nick@...us-l.demon.co.uk> wrote:
> This has been known since Adam was a cowboy.
Well, this /is/ full-disclosure, no? Best to tell than to withhold.

And while I would hope that there aren't a rash of old-school
vulnerabilities blowing through the list, I, for one, was unaware that you
could specify telnet ports like that. I wouldn't be surprised if I'm not
alone. Now I'll know what's up if I ever see stuff like this.

Though it does worry me a bit that this came from a @cisco.com address.
Shouldn't they be kind of *YAWN* about all things networking?

--
Andy
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/