Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 50476

Summary:	Telnet has major security flaw
Product:	[Retired] Red Hat Linux	Reporter:	Need Real Name <laurence>
Component:	telnet	Assignee:	Harald Hoyer <harald>
Status:	CLOSED DUPLICATE	QA Contact:	David Lawrence <dkl>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	7.0	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2001-07-31 15:50:20 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Need Real Name 2001-07-31 15:50:16 UTC

From Bugzilla Helper:
User-Agent: Mozilla/4.77 [en] (X11; U; Linux 2.4.3-12 i686)

Description of problem:
A big security hole was recently discovered in telnetd.  I can't tell if my
telnet is vulnerable.  The RPM I used was telnet-server-0.17-10.  I don't
know if it's vulnerable because RedHat didn't release an advisory.  the
0.17 matches non-vulnerable netkit versions in number, but I can't find any
information as to whether or not this telnetd is netikit.  Thanks.

How reproducible:
Always

Steps to Reproduce:
1.I don't know if there is a problem, but if you find the source code on
BugTraq for the vulnerability checker, you get a hit.
2. Be unsure--this checker is known to produce wrong results on some
systems
3.Lather, rinse, repeat...
	

Additional info:

Comment 1 Harald Hoyer 2001-07-31 15:53:36 UTC


*** This bug has been marked as a duplicate of 50335 ***