[20165] in bugtraq
Re: Console 3200 telnetd problem.
daemon@ATHENA.MIT.EDU (Rich Teer)
Wed Apr 11 18:16:23 2001
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-ID: <Pine.GSO.4.21.0104110926350.4095-100000@mars.rite-group.com>
Date: Wed, 11 Apr 2001 09:28:01 -0700
Reply-To: Rich Teer <richard.teer@RITE-GROUP.COM>
From: Rich Teer <richard.teer@RITE-GROUP.COM>
X-To: John McInnes <john@DISSENSION.NET>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <20010411130817.A12124@dissension.net>
On Wed, 11 Apr 2001, John McInnes wrote:
> My recommendation to Lightwave Com., is to change the firmware so that
> upon connection to the telnet ports, you are immediatly prompted to
> log in as a user, and when there are 3 or more failed login attempts
> the failure is logged and the TCP connection is closed.
I would further recommend to Lightwave Communications that they implement
an SSH interface(s) on these products too, to prevent packet sniffing.
--
Rich Teer
President,
Rite Online Inc.
Voice: +1 (250) 979-1638
URL: http://www.rite-online.net
