Telnet security risk

[Jeffrey Stevens <jstevens@xxxxxxxxxxxx>]

What you don't see mentioned here is why CA doesn't flow the password.  The
answer is, CA is flowing an encrypted password using the bypass signon
function.  This is part of the TN5250E enhanced interface, which is not
exploited by Win95 Telnet client but is used by CA.  You don't have to use
hardware (switches) when you can just require clients to use encrypted
passwords.

> Date: Tue, 04 Apr 2000 10:50:18 -0700
> From: Jerome Draper <jdraper@wco.com>
> Subject: Telnet security risk
> *************************** NEWSWire/400 ***************************
> A NEWS/400 Publication                   http://www.as400network.com
> Issue 217                                              April 4, 2000
> 
> TECH TIP: TELNET SECURITY HOLE
> http://www.as400network.com/nwn/story.cfm?ID=7051

-- 
J.S. (Jeffrey) Stevens  AS/400 TCP/IP (Telnet/WSG/LPD)
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---