Nortel Networks Router Unpassworded Account (User Level)

The remote Telnet service has an account named 'User' that does not have a password. This issue is known to affect Nortel Networks formerly Bay Networks routers. And it could allow an attacker to access the router, reconfigure it to block access, and prevent its use. This script was written by...

Nortel Networks Router Unpassworded Account (manager Level)

The remote Nortel Networks former Bay Networks router has no password for the manager account. An attacker could telnet to the router and reconfigure it to lock you out of it. This could prevent you from using your Internet connection. This script was written by Victor Kirhenshtein Based on...

telnet and rlogin URLs disclose sensitive information, including Environment variables

Overview Some telnet clients may disclose sensitive information in environment variables Description Web browsers can be configured to respond to certian protocol types through the use of a helper application. In this case, web browsers can respond to telnet: URLs with the use of a helper...

MS00-067: Telnet Client NTLM Authentication Vulnerability (272743)

The hotfix for the 'Telnet Client NTLM Authentication' problem has not been applied. This vulnerability may, under certain circumstances, allow a malicious user to obtain cryptographically protected login credentials from another user. C Tenable Network Security, Inc. include"compat.inc"; if...

tco.txt

Synnergy Laboratories Advisory SLA-2000-14 NAME BSD/Linux telnet client overflow AFFECTED Linux Debian Redhat Mandrake Slackware possibly others BSD FreeBSD possible others SYNOPSIS Synnergy Labs has found a bug in the telnet client that causes a stack overflow by filling the DISPLAY environment...

pam_smb / pam_ntdom User Name Remote Overflow

The remote telnet server shuts the connection abruptly when given a long username followed by a password. Although Nessus could not be 100% positive, it may mean that the remote host is using an older pamsmb or pamntdom pluggable authentication module to validate user credentials against a NT...

@stake Advisory: NTLM Replaying via Windows 2000 Telnet Client (A 091400-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I wish this could have gone out sooner but there was an issue with the initial Microsoft patch which we found during our testing. They subsequently decided to fix the patch which delayed things a bit. We feel that if a vendor is taking an issue...

Security Bulletin (MS00-067)

Microsoft Security Bulletin MS00-067 - --------------------------------------- Patch Available for "Windows 2000 Telnet Client NTLM Authentication" Vulnerability Originally posted: September 14, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the...

Win2k Telnet.exe malicious server vulnerability

Microsoft was informed of this problem with exploit over a month ago. I received some token responses right after emailing them, but have heard nothing since. If they have released an advisory of their own yet, I have not seen it. I informed them up-front that I would release a full-disclosure...

Win2k Telnet.exe malicious server vulnerability

/ NTLM telnetD v0.8 Snarfs NTLM challenge/response by convincing w2k telnet client to auto-authenticate. Outputs auth-data in LophtCrack sniff format on stdout. compile: gcc -o w2kteld ntlmtelnetd.c run: ./w2kteld Then wait for w2k to telnet to you. for the impatient, there are always ways of...

adv_telnet1.txt

/\ /\ /\ \ \ / //\ /:\ /\ /\ /\ \ \ \ | / / : / . \ . | | . \ \ / . \ / : \ / . . \ \ . | / \ | / / \ / \ . | | . \ /. \ : : //\ / \ / \ \ | / | / / / / / / / / / ---------------------------------------------------Meliksah Ozoral E-mail...

msw2ktelnetdos.sh

Microsoft Windows 2000 Telnet Server DoS Vulnerability Microsoft Windows 2000 Server comes with a telnet server to provide remote console access. A remote attacker can send a stream of binary zeros to the server, causing it to fail. If automatic restart is enabled, numerous attacks will cause the...

Shiva Integrator Default Password

The remote Shiva router uses the default password. This means that anyone who has downloaded a user manual can telnet to it and reconfigure it to lock you out of it, and to prevent you to use your internet connection. This script was written by Stefaan Van Dooren See the Nessus Scripts License fo...

DoS против Pragma Telnet Server

Ошибка в Rexec - сервере порт 512 - переполнение буфера...

Microsoft Windows Server 2000 - 'telnet.exe' NTLM Authentication

source: https://www.securityfocus.com/bid/1683/info By default, the telnet client telnet.exe shipped with Microsoft Windows 2000 utilizes Windows NT Challenge/Response NTLM as an authentication method. When establishing a connection to a host, the telnet client will attempt authentication via NTL...

Microsoft Windows Server 2000 - telnet.exe NTLM Authentication

Microsoft Windows Server 2000 - telnet.exe NTLM Authentication source: https://www.securityfocus.com/bid/1683/info By default, the telnet client telnet.exe shipped with Microsoft Windows 2000 utilizes Windows NT Challenge/Response NTLM as an authentication method. When establishing a connection t...

Security Bulletin (MS00-050)

Microsoft Security Bulletin MS00-050 - -------------------------------------- Patch Available for "Telnet Server Flooding" Vulnerability Originally Posted: July 24, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the Telnet Server that ships as part...

DoS против telnet в Windows 2000

Большое число случайных данных в порт telnet TCP/23 приводит к отказу службы...

telsrv.txt

Application: GAMSoft's TelSrv 1.4/1.5 Problem Type: Denial of Service Author: Prizm Platforms: Windows 95/98/NT/2k Vendor Status: Contacted. Vendor Website: http://www.gamsoft.com Product Description ------------------- TelSrv is superior Telnet server. It provides you with the ability to remotel...

GAMSoft TelSrv 1.5 Username Buffer Overflow

This module exploits a username sprintf stack buffer overflow in GAMSoft TelSrv 1.5. Other versions may also be affected. The service terminates after exploitation, so you only get one chance! Module Options msf use exploit/windows/telnet/gamsoft/telsrvusername msf undefinedtelsrvusername show...