Re: telnetd vulnerability from BUGTRAQ
On Saturday, 25 September 2004, at 10:34:43 -0500,
hanasaki wrote:
> When IPSEC is being used, telnet works the same; however is secure
> because it, like all traffic, is sent over a transparent tunnel.
>
But an IPsec tunnel encrypts traffic just between the tunnel endpoints.
But this need not to be the full path between the telnet client and
server, so anyone sniffing (for example) on your destination LAN will
get you usernames and passwords easily.
Greetings.
--
Jose Luis Domingo Lopez
Linux Registered User #189436 Debian Linux Sid (Linux 2.6.9-rc1)
Reply to: