[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Solaris telnet vulnerability - how many on your network?
- To: full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: Re: [Full-disclosure] Solaris telnet vulnerability - how many on your network?
- From: Graham Reed <greed@xxxxxxxxx>
- Date: Tue, 13 Feb 2007 15:53:28 -0500
Brad_Powell@xxxxxxxx writes:
> Of course disabling in.telnetd in /etc/inetd.conf (and doing a pkill -HUP
> inetd) if possible is a safe bet,
Or, going with Solaris 10's 'SMF' thing:
% svcadm disable svc:/network/telnet
And, while you're at it,
% svcadm disable svc:/network/shell:default
% svcadm disable svc:/network/login:rlogin
(See man pages for in.telnetd, in.rshd, and in.rlogind.)
At least one machine I run doesn't have the usual /etc/inetd.conf.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/