| Alan D. Salewski via plug on 22 Jan 2026 21:05:25 -0800 |
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
| Re: [PLUG] Ancient telnet bug happily hands out root to attackers |
On 2026-01-22 09:21:55, jeffv via plug <plug@lists.phillylinux.org> spake thus:
https://www.theregister.com/2026/01/22/root_telnet_bug/ A recently disclosed critical vulnerability in the GNU InetUtils telnet daemon (telnetd) is "trivial" to exploit, experts say. The bug, which had gone unnoticed for nearly 11 years, was disclosed on January 20 and is tracked as CVE-2026-24061 (9.8).
The LWN.net coverage and discussion of it:
"Remote authentication bypass in telnetd"
posted 2026-01-20 by Jonathan Corbet
https://lwn.net/Articles/1055213/
--
a l a n d. s a l e w s k i
ads@salewski.email
salewski@att.net
https://github.com/salewski
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug