Ein gravierender Bug im zehn Jahre alten telnetd macht aus jedem Client potenziell Root – Admins sollten betroffene Systeme jetzt prüfen und Dienste abschalten. 🔒⚠️ Details: https://www.golem.de/news/jetzt-abschalten-zehn-jahre-alte-telnetd-luecke-macht-jeden-client-zum-root-2601-204433.html #Security #ITSec #Vulnerability #Newz

https://seclists.org/oss-sec/2026/q1/89

Jetzt abschalten: Zehn Jahre alte Telnetd-Lücke macht jeden Client zum Root - Golem.de

Seit 2015 kann sich über Telnetd jeder Client einen Root-Zugriff verschaffen. Einen Patch gibt es zwar, empfohlen wird jedoch die Abschaltung.

Golem.de

Install brew.sh 🚀, which can also be installed on Linux 🐧. Then install Lynis 🛠️.

Then use the following command:

$ sudo /home/linuxbrew/.linuxbrew/bin/lynis audit system

Check your system for 'Installed telnet server package [ NOT FOUND ]' ❌.

And you are good to go! 👍 Lynis works on clients (workstations) 💻, servers 🌐, and also on many different #Linux and #UNIX systems 🖥️, as well as on #macOS 🍏.

#brew #Linux #Lynis #Security #macOS #Audit

@nemo I’m amused by the idea of installing an entire new package manager, to install an additional package, just for the sake of checking some other package isn’t installed.

@benjamineskola $ apt-cache policy lynis
lynis:
Installed: (none)
Candidate: 3.1.4-1
Version table:
3.1.4-1 500
500 http://archive.ubuntu.com/ubuntu questing/universe amd64 Packages
500 http://archive.ubuntu.com/ubuntu questing/universe i386 Packages

Brew version lynis --version
3.1.6

Brew is a versatile and cool tool https://www.ypsidanger.com/homebrew-is-great-on-linux/

Brew is very easy to update doesn require sudo and has very cutting edge software repos :D

Lynis might be overkill, yet it offers… 1/2

Index of /ubuntu

@benjamineskola 2/2 an amazing and easy way to audit Linux and also many other *Nix systems, be it workstations (clients) or servers, to be audited in a very elegant and nice way. 😁

My rule of thumb is: if anything can contribute to an easy and elegant way to provide more security and privacy, it can be my guest. #imho #twocents 😅 🤷

@nemo I know what Brew is. But if I didn’t already have it installed, I’m not sure that I’d want to install it for this purpose alone.

My concern would be that having more software installed — and particularly, a whole new package manager — increases security risk, if only a little. Everything comes with a cost as well as a benefit.

Installing it directly from the distribution’s repositories is probably a better choice if it’s available there. But also, it only takes a single command to check directly whether telnet is installed.

@benjamineskola Fair and valid points from your side :D