File telnet-encryption

脚本使用类型: portrule
脚本所属分类: safe, discovery
脚本下载地址: http://nmap.org/svn/scripts/telnet-encryption.nse

User Summary

Determines whether the encryption option is supported on a remote telnet server. Some systems (including FreeBSD and the krb5 telnetd available in many Linux distributions) implement this option incorrectly, leading to a remote root vulnerability. This script currently only tests whether encryption is supported, not for that particular vulnerability.

References:

• FreeBSD Advisory: http://lists.freebsd.org/pipermail/freebsd-announce/2011-December/001398.html
• FreeBSD Exploit: http://www.exploit-db.com/exploits/18280/
• RedHat Enterprise Linux Advisory: https://rhn.redhat.com/errata/RHSA-2011-1854.html

Example Usage

执行格式

nmap -p 23 <ip> --script telnet-encryption

Script Output

PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
| telnet-encryption: 
|_  Telnet server supports encryption

Requires

• bin
• nmap
• shortport
• table

Author: Patrik Karlsson, David Fifield, Fyodor

License: VER007 整理 http://www.ver007.com