[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-security] telnet and telnetd Raq3 overflow problem



hello

I've recently knew that Red Hat had a security bug in telnet and telnetd.
The version of /usr/sbin/in.telnetd that comes as default on Redhat 7.0,
and many other distributions contains an exploitable overflow in the
handling of its output, allowing execution of arbitrary commands.

A release is now on Red Hat 's web site but  no pkg in Cobalt's web site for
my Raq3

Is there a possibility to desactive telnet and telnetd in order to not being
hacked
 waiting for the cobalt release.

thanks

Fred