GNU Inetutils telnetd 伺服器發現多項危急漏洞，影響大多數現代 Linux 部署。這些缺陷允許攻擊者在顯示登入提示前，即可繞過身分驗證並執行遠端程式碼 (RCE)。
漏洞摘要
| 漏洞類型 | 編號 | CVSS 分數 | 受影響版本 |
|---|---|---|---|
| SLC 緩衝區溢位 | 尚未指派 | 危急 (Critical) | 2.7 及更早版本 |
| 身分驗證繞過 ($USER 變數) | CVE-2026-24061 | 9.8 | 1.9.3 及更高版本 |
使用 runZero 進行識別
請在您的資產清單 (Asset Inventory) 中使用以下查詢語句來尋找可能受影響的 Linux 系統：
建議採取行動
- 在整個網路中停用 telnetd 服務。
- 確保實施嚴格的網路存取控制（防火牆）。
- 將遠端管理工具更換為具備加密功能的 SSH。
About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.
About Version 2 Digital
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.
