Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Telnet client vulnerability; DNS posioning re-appearing SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Telnet client vulnerability; DNS posioning re-appearing

Comments about Infocon

We have received numerous valuable comments about our infocon system. Thanks for all the comments. In the next few days, we will come up with a plan to improve the system. Stay tuned.

Telnet client vulnerability

There are two new similar vulnerabilities affecting telnet clients on FreeBSD, variants of Linux, Solaris and OS X. Together with the telnet exploitation that we reported couple days ago, it should be a warning for those who haven't disabled telnet on their network.

Disable all telnet daemons on your machines, use SSH instead. If you really don't need the client, consider removing it or disable the execution bit on the file.


DNS poisoning still around

We have received a few more reports of DNS poisoning, we think it is the previous attack re-appearing and are handling it. Please let us know if you are seeing this attack again.


Jason Lam, jason / at /
I will be teaching next: Leading Cloud Security Design and Implementation - MGT520 Beta One 2021


93 Posts
ISC Handler
Mar 30th 2005

Sign Up for Free or Log In to start participating in the conversation!