oss-sec mailing list archives

Re: Telnetd Vulnerability Report


From: Albert Veli <albert.veli () gmail com>
Date: Thu, 26 Feb 2026 09:30:07 +0100

Hello,

On 2/25/26 21:39, Lyndon Nerenberg (VE7TFX/VE6BBM) wrote:
Telnet is "old" because iit is simple and does its job well.  It
doesn't need all the new shiny knobs people throw at everything,
nor does it need to grow HTML5 support.  It works as is, and it
works well.  But if you still use it for remote logins, that's
operator error, not a protocol security violation.
I agree to this, but I can add that telnet remains widely used for login in OT (Operational Technology) environments, including sites running critical infrastructure. While operators often justify this by relying on network isolation, this reasoning breaks down the moment the air gap is bridged.

Current thread: