Re: NTLM and Telnet

From: x y, mvp (levinson_k@despammed.com)
Date: 02/21/03


From: "x y, mvp" <levinson_k@despammed.com>
Date: Fri, 21 Feb 2003 08:34:47 -0500


Telnet is inherently insecure and the password is AFAIK always passed in
plain text by typing it in manually and not automatically through Windows
authentication. All your commands are also passed in plain text and can be
captured by a hacker with a sniffer, even if you are using switches on your
network.

You *can* control which users have permission to log into telnet.
Documented here:

http://www.microsoft.com/technet/security/tools/chklist/iis5chk.asp

Instead of Telnet, you should consider SSH. Links to free SSH solutions
that run on Windows can be found at www.openssh.com and
www.networksimplicity.com You might also consider a commercial remote
control GUI program like ReachOut, PC Anywhere, etc.

"Robert Ridley" <rob.ridley@scigames.com> wrote in message
news:017501c2d912$f5cd5af0$a101280a@phx.gbl...
> How can you set up NTLM on a Windows 2000 Professional
> system so I can telnet into a Windows 2000 Server?



Relevant Pages

  • [Full-Disclosure] ron1n phone home, episode 4
    ... Hacking from Windows 3.x, 95 and NT ... Use secret Windows 95 DOS commands to track down and port surf computers ... Download hacker tools such as port scanners and password crackers designed ... Now you have the option of eight TCP/IP utilities to play with: telnet, ...
    (Full-Disclosure)
  • Re: Product for Running Embedded C# Application
    ... Telnet sessions or Web sessions with our Web server on the device and a lot ... There's a Telnet server available to Windows CE ... communicates with specific hardware and forwards data to a back end ...
    (microsoft.public.dotnet.framework.compactframework)
  • RE: sshd for windows
    ... Subject: sshd for windows ... NTLMv2 authentication for the password challenge maybe, but telnet ... > The Gartner Group just put Neoteris in the top of its Magic ... and see how you can get plug-n-play secure remote ...
    (Security-Basics)
  • All working now! Thanks!
    ... "Jay Mathew" wrote: ... > Also Norton Systemworks 2003 all updated thanks to the broadband connection. ... > fine but apparently the Telnet service from the services window is missing ... > He suggested that that the only option was to reinstall windows and he ...
    (microsoft.public.windowsxp.network_web)
  • Re: Telnet Pbl
    ... > I have a little logical problem with telnet. ... I have a windows box ... To do this I login to the redhat box from ... it's less convenient than ssh. ...
    (comp.os.linux.misc)