Re: Security Vulnerabilities in inetutils telnetd

[Tal Carmel]

Hi Simon,

Thank you for the quick reply.
Just to confirm, are you sure you'd like me to disclose these POCs in a
public list? We would prefer to send this over a secure channel as this
information could be weaponised and effect current users of inetutils.

Kind regards,
Tal Carmel
Delphos Labs

On Wed, May 27, 2026 at 10:25 PM Simon Josefsson <si...@josefsson.org>
wrote:

> Tal Carmel <t...@delphoslabs.com> writes:
>
> > Hello,
> >
> > I'm reaching out on behalf of Delphos Labs because we discovered 2
> > vulnerabilities in inetutils.
> >
> > What email address should we use for security disclosures? We have POCs
> > which we would like to send securely.
>
> Hi!  Thanks for studying inetutils.  I believe it is fine to share to
> this public bug-inetutils list, so we all can help work on investigation
> and solutions to problems.
>
> /Simon
>