oss-sec mailing list archives

Re: Telnetd Vulnerability Report


From: Solar Designer <solar () openwall com>
Date: Tue, 24 Feb 2026 21:33:37 +0100

On Tue, Feb 24, 2026 at 05:05:58AM -0500, kf503bla () duck com wrote:
Who uses telnet anyway? It's deprecated. Everyone uses ssh for any kind of remote access.

Indeed.  Yet:

Quite many people surely do still use a telnet client to access various
older/smaller devices, as well as online resources - in particular, in
the field of astronomy, as it was brought up in last month's discussion
elsewhere.  Also online retro computers and BBSes.

This means that some kind of telnet server is also still in use on those
devices and in those places.  Probably in most of those cases it is not
one from InetUtils, but who knows.  I suppose some astronomy site may
have migrated their telnet gateway to a Debian or Ubuntu system.

Alexander


Current thread: