?? 1253.txt
字號:
Rule:--Sid:1253--Summary:This event is generated after a sucessful exploit of the BSD derived Telnet daemon.--Impact:Remote root access. This may or may not indicate a successful root compromise of a telnet server.--Detailed Information:This event is generated after a possible sucessful attempt to compromisea server running a BSD derived version of Telnet. A buffer overflowcondition exists that may present an attacker with the opportunity toexecute code of their choosing.The attacker does not need to login to the server to exploit thisvulnerability, only a connection to the server is needed.--Affected Systems: Multiple Vendor Telnet servers running versions of telnetd derived from the BSD telnet daemon.--Attack Scenarios:An attacker may utilize one of the available exploit scripts.--Ease of Attack:Simple. Exploit scripts are publicly available. This vulnerability mayalso be exploited by a worm.--False Positives:None known.--False Negatives:None known.--Corrective Action:Consider using Secure Shell instead of telnet.Block inbound telnet access if it is not required.--Contributors:Sourcefire Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>--Additional References:--
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -