News

7 Ways to Fix Your Telnet

Microsoft Corp. this month issued a megapatch to seal seven unrelated security holes in the way Windows 2000 handles Telnet services.

It is the second time in recent months that Microsoft grouped patches for several vulnerabilities in a single security bulletin. Microsoft released a similar patch fixing a number of holes in Internet Information Services.

Microsoft only says administrators should consider applying the patch. When Microsoft considers a vulnerability especially dangerous, the company flatly recommends that administrators should apply a patch.

Four of the vulnerabilities in Telnet allow denial of service attacks. Two vulnerabilities allow privilege elevation. The other vulnerability could allow information disclosure via Guest accounts exposed through a Telnet server. That vulnerability is related to a similar problem discovered in FTP.

The fixes addressed in the patch will later be included in Windows 2000 Service Pack 3.

<>The patch can be found here.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Microsoft Publishes Windows Deadlines on Upgrading to SHA-2

    Microsoft on Friday described its 2019 timeline for when it will start distrusting Shell Hashing Algorithm-1 (SHA-1) in supported Windows systems, as well as in the Windows Server Update Services 3.0 Service Pack 2 management product.

  • Performing a Storage Refresh on Windows Server 2016, Part 1

    To spruce up some aging lab hardware, Brien decided to make the jump to all-flash storage. Here's a walk-through of the first half of the process.

  • Datacenters Are Cooling Down as Buildouts Heat Up

    Tech giants Google, Apple and others are expanding their datacenter footprints at a rapid rate, and it's pushing the industry to find better ways to power all that infrastructure.

  • Vendors Issue Patches for Linux Container Runtime Flaw Enabling Host Attacks

    This week, the National Institute of Standards and Technology (NIST) described a high-risk security vulnerability (CVE-2019-5736) for organizations using containers that could lead to compromised host systems.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.