Due to the feature and/or bug referred to recently on this list, this is
an incredibly dangerous script to run without adequate filtering at all
your border routers, terminal servers and shell/colocate machines to
prevent telnet from unauthorized sources.
Specifically, your script does not properly turn off debugging when it is
done before closing out the telnet sessions. If someone were to modify
the debugging to look at and translate login authentications and the
script were to fail for any reason, the usernames and passwords would be
possibly be available to anyone else telneting in.
Take Care
Stephen Zedalis
System Administrator - Exis Net, Inc.
On Tue, 28 Jul 1998, Curtis Coleman wrote:
>Hi there,
>
>I thought this might be of interest to somebody out there. It's a
>little script that I use to associate different types of debug output
>on the fly. Edit $DUMPDIR and $PASSWD and run something like this:
>
>tele.pl pm3-1.foobar.com 23 &
>tele.pl pm3-2.foobar.com 23 &
>tele.pl pm3-3.foobar.com 23 &
>.. etc ...
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>