Groups | Search | Server Info | Login | Register

Groups > comp.security.misc > #1562

Re: Terminals in X Window System.

Show all headers | View raw

peter@easthope.ca writes:
> Marco Moock <mm@dorfdsl.de> wrote:
>> It gives me
>> m@ryz:~$ xterm localhost
>> xterm: No absolute path found for shell: localhost
>> 
>> Is that what you ran?
>
> Correction: I should have asked, is "telnet localhost" less secure 
> than "xterm"?

They do different things, so it’s not clear why you’d compare them.

>> telnet offers you to login if a telnet server is running.
>
> In Debian,
> # grep ^telnet /etc/inetd.conf
> telnet stream tcp nowait root /usr/sbin/tcpd /usr/sbin/telnetd -E /bin/bash
>
> Nobody other than me has an account on the system.  I authenticate 
> after the system boots or when returning after logout. Neither "telnet 
> localhost" nor "xterm" asks for a password.

A telnetd without a password will allow lateral movement from other
UIDs.

- 
https://www.greenend.org.uk/rjk/

Back to comp.security.misc | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Terminals in X Window System. peter@easthope.ca - 2025-03-12 06:41 -0700
  Re: Terminals in X Window System. Marco Moock <mm@dorfdsl.de> - 2025-03-12 17:08 +0100
    Re: Terminals in X Window System. Richard Kettlewell <invalid@invalid.invalid> - 2025-03-12 19:31 +0000
    Re: Terminals in X Window System. peter@easthope.ca - 2025-03-13 08:28 -0700
      Re: Terminals in X Window System. Marco Moock <mm@dorfdsl.de> - 2025-03-13 20:10 +0100
        Re: Terminals in X Window System. Grant Taylor <gtaylor@tnetconsulting.net> - 2025-03-13 21:38 -0500
        Re (2): Terminals in X Window System. peter@easthope.ca - 2025-03-14 13:09 -0700
          Re: Re (2): Terminals in X Window System. Richard Kettlewell <invalid@invalid.invalid> - 2025-03-14 21:04 +0000
            Re (3): Terminals in X Window System. peter@easthope.ca - 2025-03-16 08:21 -0700
              Re: Re (3): Terminals in X Window System. Richard Kettlewell <invalid@invalid.invalid> - 2025-03-16 16:13 +0000
        Re: Terminals in X Window System. William Unruh <unruh@invalid.ca> - 2025-03-19 15:52 +0000
      Re: Terminals in X Window System. Richard Kettlewell <invalid@invalid.invalid> - 2025-03-13 21:11 +0000
        Re: Terminals in X Window System. peter@easthope.ca - 2025-03-23 11:23 -0700
          Re: Terminals in X Window System. Richard Kettlewell <invalid@invalid.invalid> - 2025-03-23 19:34 +0000
            Re (2): Terminals in X Window System. peter@easthope.ca - 2025-03-23 22:02 -0700
          Re: Terminals in X Window System. William Unruh <unruh@invalid.ca> - 2025-03-26 06:02 +0000

csiph-web