Security Incidents mailing list archives
Re: twinkie
From: peak () ARGO TROJA MFF CUNI CZ (Pavel Kankovsky)
Date: Thu, 17 Feb 2000 10:34:37 +0100
On Tue, 15 Feb 2000, Vasiliy Kuznetsov wrote:
Good time of day! There are strange things are happens in my local network for an indefined period. I saw such records in maillog: Feb 13 23:46:35 perfect ipop3d[23091]: AUTHENTICATE twinkie failure host=[192.168.1.200] Feb 14 08:37:13 perfect ipop3d[24749]: AUTHENTICATE twinkie failure host=[192.168.1.141] Feb 14 08:51:31 perfect ipop3d[24812]: AUTHENTICATE twinkie failure host=[192.168.1.136]
Never ascribe to end-user malice what may be explained by Microsoft. :) Apparently, at least some versions of "standard Internet Mail by Microsoft bundled with W95", in their infinite wisdom, try out "AUTH twinkie" command before trying out a more standard (at least outside Redmond) authentication method. It is probably more annoying than really dangerous. --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation."
Current thread:
- Re: echo requests, 1480 bytes Donald McLachlan (Feb 09)
- Ports 41508, 41524 & 41531 Aronius, Joakim (Feb 09)
- Re: Ports 41508, 41524 & 41531 Rick Ballard (Feb 10)
- Re: echo requests, 1480 bytes Brett Glass (Feb 09)
- Re: echo requests, 1480 bytes James Lohman (Feb 10)
- Re: echo requests, 1480 bytes Marc Slemko (Feb 15)
- Re: echo requests, 1480 bytes James Lohman (Feb 10)
- twinkie Vasiliy Kuznetsov (Feb 15)
- Re: twinkie Przemyslaw Frasunek (Feb 16)
- Re: twinkie Pavel Kankovsky (Feb 17)
- Re: echo requests, 1480 bytes Przemyslaw Frasunek (Feb 15)
- <Possible follow-ups>
- Re: echo requests, 1480 bytes Ron Gula (Feb 11)
- Re: echo requests, 1480 bytes Omachonu Ogali (Feb 15)
- Re: echo requests, 1480 bytes Donald McLachlan (Feb 16)
- Re: echo requests, 1480 bytes Mixmaster (Feb 19)
- Re: echo requests, 1480 bytes Fengor Wolfsclaw (Feb 22)
- Ports 41508, 41524 & 41531 Aronius, Joakim (Feb 09)