Hugo van der Kooij <[EMAIL PROTECTED]> writes:
> According to some verified test nessus failed to identify the presence of
> telnet on several other ports on a Cisco router.
Is that a true telnet server?
Maybe the code in find_service.c is too restrictive.
It tests for the presence of 0xFF ("IAC" = interpret as command escape
code) followed by a byte between 251 and 254.
RFC 854 defines commands between 240 and 254.
> Renaud: If you want to verify this I can ask the customer if you are
> allowed to see if you can reproduce the incident.
If you run a netcat (not telnet), you should get at least a IAC
followed a command.
--
mailto:[EMAIL PROTECTED]
GPG Public keys: http://michel.arboi.free.fr/pubkey.txt
http://michel.arboi.free.fr/ http://arboi.da.ru/
FAQNOPI de fr.comp.securite : http://faqnopi.da.ru/
