Re: is this something?

[Philip Stoev <philip () STOEV ORG>]

I was able to confirm that on a vanilla, unpatched Windows 2000 Professional
without SP1 with NTLM set to 0. It seems to me that only Microsoft's telnet
server is affected -- I also tried on a sshd server for Windows 2000 by
Brandon Zehm <caspian () linuxfreak com>, however it does not appear to be
affected.

Philip

----- Original Message -----
From: "sween" <sween () MODELM ORG>
To: <VULN-DEV () SECURITYFOCUS COM>
Sent: Wednesday, January 17, 2001 8:29 AM
Subject: is this something?


> I usually just browse through the messages on this list to play with
> peoples neat sploits and such...im going to get brave and post something
> I found playing around this evening...
> your thoughts on this:
>
> WINDOWS 2000Pro, Telnet service started with NTLM turned off...
>
>
> $ telnet 192.168.0.1
> Trying 192.168.0.1...
> Connected to 192.168.0.1.
> Escape character is '^]'.
> Microsoft (R) Windows (TM) Version 5.00 (Build 2195)
> Welcome to Microsoft Telnet Service
> Telnet Server Build 5.00.99201.1
> login: guest
> Login through Guest account not allowed
> login: \\guest
> password:
>
> *===============================================================
> Welcome to Microsoft Telnet Server.
> *===============================================================
> C:\>
>
>
> UNC dealy? misconfig? lack of config? lack of coffee?
> Thank you for your time.
>
> Ron Sweeney
>
>
> -sween
>  ---
> | M |  http://www.modelm.org
>  ---   "clickity, clack."