oss-sec mailing list archives

Re: Re: Telnetd Vulnerability Report


From: Florian Weimer <fweimer () redhat com>
Date: Thu, 26 Feb 2026 11:26:02 +0100

* Marco Moock:

On 24.02.2026 05:05 kf503bla () duck com kf503bla () duck com wrote:

Who uses telnet anyway? It's deprecated. Everyone uses ssh for any
kind of remote access.

In certain situations telnet is still being used, because it is
supported on a wide range of systems, regardless of key (exchange)
algorithms or hash algorithms.

Part of that is that the industry has moved to a threat model where it
is considered more secure to use an unauthenticated, unencrypted channel
rather than one that uses (for example) an HMAC based on SHA-1 for
integrity protection.

Thanks,
Florian


Current thread: