full-disclosure - Microsoft Windows and *nix Telnet Port Number Argument Obfuscation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu Jun  9 14:59:20 2005
From: khermans at cisco.com (Kristian Hermansen)
Subject: Microsoft Windows and *nix Telnet Port
	Number Argument Obfuscation

On Wed, 2005-06-08 at 15:04 +1200, Nick FitzGerald wrote:
> This has been known since Adam was a cowboy.

Although I don't believe that your claim is unlikely, it would have been
nice to post a link to the original discovery to back it up.  Everyone
that I have showed this to, personally, has not seen it before.  And,
after some google searching, I could not locate anyone else either that
talked about this -- the closest thing was an old Microsoft telnet
advisory that didn't mention this behavior specifically.

With that said, I would like to ask anyone who has info about the
original discovery to please post it here (Nick didn't respond to my
email).  I am interested to know more about it, and maybe the original
discoverer found other things as well...thanks
-- 
Kristian Hermansen <khermans@...co.com>
Cisco Systems, Inc.