Groups | Search | Server Info | Login | Register


Groups > comp.security.misc > #1562

Re: Terminals in X Window System.

Path csiph.com!weretis.net!feeder8.news.weretis.net!usenet.goja.nl.eu.org!nntp.terraraq.uk!.POSTED.tunnel.sfere.anjou.terraraq.org.uk!not-for-mail
From Richard Kettlewell <invalid@invalid.invalid>
Newsgroups comp.security.misc
Subject Re: Terminals in X Window System.
Date Thu, 13 Mar 2025 21:11:40 +0000
Organization terraraq NNTP server
Message-ID <wwvr030d4ab.fsf@LkoBDZeT.terraraq.uk> (permalink)
References <20250312170838.7d5b1e1c@ryz.dorfdsl.de> <vqutjn$3dvl3$1@dont-email.me>
MIME-Version 1.0
Content-Type text/plain; charset=utf-8
Content-Transfer-Encoding 8bit
Injection-Info innmantic.terraraq.uk; posting-host="tunnel.sfere.anjou.terraraq.org.uk:172.17.207.6"; logging-data="114301"; mail-complaints-to="usenet@innmantic.terraraq.uk"
User-Agent Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux)
Cancel-Lock sha1:e3cG2DkVWELbnruIHTQ8I0B7Mto=
X-Face h[Hh-7npe<<b4/eW[]sat,I3O`t8A`(ej.H!F4\8|;ih)`7{@:A~/j1}gTt4e7-n*F?.Rl^ F<\{jehn7.KrO{!7=:(@J~]<.[{>v9!1<qZY,{EJxg6?Er4Y7Ng2\Ft>Z&W?r\c.!4DXH5PWpga"ha +r0NzP?vnz:e/knOY)PI-
X-Boydie NO
Xref csiph.com comp.security.misc:1562

Show key headers only | View raw


peter@easthope.ca writes:
> Marco Moock <mm@dorfdsl.de> wrote:
>> It gives me
>> m@ryz:~$ xterm localhost
>> xterm: No absolute path found for shell: localhost
>> 
>> Is that what you ran?
>
> Correction: I should have asked, is "telnet localhost" less secure 
> than "xterm"?

They do different things, so it’s not clear why you’d compare them.

>> telnet offers you to login if a telnet server is running.
>
> In Debian,
> # grep ^telnet /etc/inetd.conf
> telnet stream tcp nowait root /usr/sbin/tcpd /usr/sbin/telnetd -E /bin/bash
>
> Nobody other than me has an account on the system.  I authenticate 
> after the system boots or when returning after logout. Neither "telnet 
> localhost" nor "xterm" asks for a password.

A telnetd without a password will allow lateral movement from other
UIDs.

- 
https://www.greenend.org.uk/rjk/

Back to comp.security.misc | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

Terminals in X Window System. peter@easthope.ca - 2025-03-12 06:41 -0700
  Re: Terminals in X Window System. Marco Moock <mm@dorfdsl.de> - 2025-03-12 17:08 +0100
    Re: Terminals in X Window System. Richard Kettlewell <invalid@invalid.invalid> - 2025-03-12 19:31 +0000
    Re: Terminals in X Window System. peter@easthope.ca - 2025-03-13 08:28 -0700
      Re: Terminals in X Window System. Marco Moock <mm@dorfdsl.de> - 2025-03-13 20:10 +0100
        Re: Terminals in X Window System. Grant Taylor <gtaylor@tnetconsulting.net> - 2025-03-13 21:38 -0500
        Re (2): Terminals in X Window System. peter@easthope.ca - 2025-03-14 13:09 -0700
          Re: Re (2): Terminals in X Window System. Richard Kettlewell <invalid@invalid.invalid> - 2025-03-14 21:04 +0000
            Re (3): Terminals in X Window System. peter@easthope.ca - 2025-03-16 08:21 -0700
              Re: Re (3): Terminals in X Window System. Richard Kettlewell <invalid@invalid.invalid> - 2025-03-16 16:13 +0000
        Re: Terminals in X Window System. William Unruh <unruh@invalid.ca> - 2025-03-19 15:52 +0000
      Re: Terminals in X Window System. Richard Kettlewell <invalid@invalid.invalid> - 2025-03-13 21:11 +0000
        Re: Terminals in X Window System. peter@easthope.ca - 2025-03-23 11:23 -0700
          Re: Terminals in X Window System. Richard Kettlewell <invalid@invalid.invalid> - 2025-03-23 19:34 +0000
            Re (2): Terminals in X Window System. peter@easthope.ca - 2025-03-23 22:02 -0700
          Re: Terminals in X Window System. William Unruh <unruh@invalid.ca> - 2025-03-26 06:02 +0000

csiph-web