Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC: Telnet client vulnerability; DNS posioning re-appearing - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Telnet client vulnerability; DNS posioning re-appearing

Comments about Infocon



We have received numerous valuable comments about our infocon system. Thanks for all the comments. In the next few days, we will come up with a plan to improve the system. Stay tuned.

Telnet client vulnerability



There are two new similar vulnerabilities affecting telnet clients on FreeBSD, variants of Linux, Solaris and OS X. Together with the telnet exploitation that we reported couple days ago, it should be a warning for those who haven't disabled telnet on their network.



Disable all telnet daemons on your machines, use SSH instead. If you really don't need the client, consider removing it or disable the execution bit on the file.



References:

http://www.idefense.com/application/poi/display?id=220&type=vulnerabilities&flashstatus=true

http://www.idefense.com/application/poi/display?id=221&type=vulnerabilities&flashstatus=true



DNS poisoning still around



We have received a few more reports of DNS poisoning, we think it is the previous attack re-appearing and are handling it. Please let us know if you are seeing this attack again.





-------------

Jason Lam, jason / at / networksec.org
Jason

93 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!