Security Incidents mailing list archives

Re: twinkie


From: peak () ARGO TROJA MFF CUNI CZ (Pavel Kankovsky)
Date: Thu, 17 Feb 2000 10:34:37 +0100


On Tue, 15 Feb 2000, Vasiliy Kuznetsov wrote:

Good time of day!
There are strange things are happens in my local network for an indefined period. I saw such records in maillog:
Feb 13 23:46:35 perfect ipop3d[23091]: AUTHENTICATE twinkie failure host=[192.168.1.200]
Feb 14 08:37:13 perfect ipop3d[24749]: AUTHENTICATE twinkie failure host=[192.168.1.141]
Feb 14 08:51:31 perfect ipop3d[24812]: AUTHENTICATE twinkie failure host=[192.168.1.136]

Never ascribe to end-user malice what may be explained by Microsoft. :)
Apparently, at least some versions of "standard Internet Mail by Microsoft
bundled with W95", in their infinite wisdom, try out "AUTH twinkie"
command before trying out a more standard (at least outside Redmond)
authentication method. It is probably more annoying than really dangerous.

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."


Current thread: