Beveiligingsonderzoekers hebben een een kwetsbaarheid aangetroffen in Inetutils telnetd (versie 2.7). Deze kwetsbaarheid is volgens de onderzoekers al aanwezig …

Security researchers discovered a vulnerability in GNU Inetutils telnetd version 2.7 that has existed since version 1.9.3 from 2015. The vulnerability is in how the telnetd service handles the USER environment variable. By setting this variable to '-f root', attackers can bypass authentication and gain root privileges. This poses a serious risk to system integrity. The vulnerability is very easy to exploit and exploit code is publicly available. NCSC expects that publicly accessible telnet servers will be targeted in the short term.