Rlogin

In the section on Prime Networking I will discuss the remote login feature (similar to the UNIX 'rlogin' command). ❋ Unknown (1989)

All user account and password information derived from FTP, telnet, and rlogin sessions and passing through the same network as the compromised host could be disclosed. ❋ Unknown (1997)

CERT has seen many incidents involving Trojan network programs (e.g., telnet and rlogin) and network packet sniffing programs. ❋ Unknown (1997)

The current attacks involve a network monitoring tool that uses the promiscuous mode of a specific network interface,/dev/nit, to capture host and user authentication information on all newly opened FTP, telnet, and rlogin sessions. ❋ Unknown (1997)

Systems of some service providers have been compromised, and all systems that offer remote access through rlogin, telnet, and FTP are at risk. ❋ Unknown (1997)

Since this threat involves monitoring remote connections, take care to change these passwords using some mechanism other than remote telnet, rlogin, or FTP access. ❋ Unknown (1997)

Users who access accounts using telnet, rlogin, or FTP either to or from systems within the compromised domain should change their passwords after the intruder's network monitor has been disabled. ❋ Unknown (1997)

Do not configure any of your systems to trust any of the Unix ` r 'commands (rlogin, rsh, etc.) from any machine outside your firewall. ❋ Unknown (1996)

Workaround The recommended workaround is to disable the rlogin daemon: ❋ Unknown (1996)

B. Emergency fix The emergency fix for the different levels of AIX 3 affected by this vulnerability is available via anonymous FTP from software. watson.ibm.com:/pub/rlogin/rlogin. tar. ❋ Unknown (1996)

Alternatively, change the configuration of your Internet gateway so that rlogin and rsh from the Internet to hosts in your domain are blocked. ❋ Unknown (1996)

If that is not possible, disable the rlogin and rsh services on all of your hosts. ❋ Unknown (1996)

As updates become available, any new versions will be placed in this directory with the name rlogin. tar. ❋ Unknown (1996)

If you omit [command], instead of executing a single command, rsh logs you in on the remote host using rlogin (1C). rsh hostname [- l username] [- n] ❋ Unknown (1996)

By exploiting applications that use authentication based on IP addresses (e.g., rsh and rlogin), intruders can gain user or root access on targeted hosts. ❋ Unknown (1996)