Re: [Full-disclosure] Solaris telnet vulnberability - how many on your network?

[Vincent Archer <varcher () denyall com>]

On Mon, Feb 12, 2007 at 12:00:30AM -0600, Gadi Evron wrote:
> Johannes Ullrich from the SANS ISC sent this to me and then I saw it on
> the DSHIELD list:

Tested around, and it does indeed work, on all solaris 10 (sparc & x86).

> Update from HD Moore:
> "but this bug isnt -froot, its -fanythingbutroot =P"

OS packaging person here (the guy who defines the exact stripped version
we install on customer appliance) did test with root, and it worked. I
suspect it is dependent on whether root is enabled as allowed as a remote
login or not (a setting I dimly remember being available on solaris 10
years ago, I think).

> Anyone else running Solaris?

We do, and we confirm. The info is spreading like wildfire, and justifiably
so - I thought this bug category (-fuser) was squashed last with AIX over
10 years ago.

-- 
Vincent ARCHER
varcher () denyall com

Tel : +33 (0)1 40 07 47 14
Fax : +33 (0)1 40 07 47 27
Deny All - 23, rue Notre Dame des Victoires - 75002 Paris - France