https://kabuqin.github.io/cappuccino.github.io/tags/telnet/Recent content in Telnet on 卡布奇诺的技术笔记Hugozh-cnMon, 27 Oct 2025 00:00:00 +0000https://kabuqin.github.io/cappuccino.github.io/posts/gnu-inetutils-telnetd-%E5%8F%82%E6%95%B0%E6%B3%A8%E5%85%A5%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0cve-2026-24061/Mon, 27 Oct 2025 00:00:00 +0000https://kabuqin.github.io/cappuccino.github.io/posts/gnu-inetutils-telnetd-%E5%8F%82%E6%95%B0%E6%B3%A8%E5%85%A5%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0cve-2026-24061/<h1 id="gnu-inetutils-telnetd-参数注入认证绕过漏洞复现cve-2026-24061">GNU InetUtils telnetd 参数注入认证绕过漏洞复现（CVE-2026-24061）</h1> <p>GNU InetUtils（GNU Network Utilities）是 GNU 项目开发的一个开源网络工具集合，旨在提供一套符合 POSIX 和 GNU 标准的传统网络管理、通信及测试的基础命令行工具和服务器端守护进程。其核心组件包括 <a href="https://www.google.com/search?q=ping&amp;sca_esv=f5bb93abf84105ec&amp;sxsrf=ANbL-n4AqRXFa1d-E2feCF4mCVim3qkXSw%3A1770714814271&amp;ei=vvaKaYCOENXU1e8P5L_PyAY&amp;biw=1912&amp;bih=948&amp;ved=2ahUKEwino-iKy86SAxWic_UHHRlnDvsQgK4QegQIARAB&amp;uact=5&amp;oq=GNU+InetUtils+%E6%98%AF%E4%BB%80%E4%B9%88&amp;gs_lp=Egxnd3Mtd2l6LXNlcnAiF0dOVSBJbmV0VXRpbHMg5piv5LuA5LmIMggQABiABBiiBDIFEAAY7wUyBRAAGO8FMgUQABjvBTIFEAAY7wVI8BBQAFjkD3AAeACQAQCYAb0BoAGpCqoBAzAuObgBA8gBAPgBAvgBAZgCCaACxArCAgQQIxgnwgIEEAAYHsICBxAAGMcDGB7CAgUQIRigAZgDAJIHAzAuOaAHkxGyBwMwLjm4B8QKwgcFMC44LjHIBxGACAA&amp;sclient=gws-wiz-serp">ping</a>、<a href="https://www.google.com/search?q=telnet&amp;sca_esv=f5bb93abf84105ec&amp;sxsrf=ANbL-n4AqRXFa1d-E2feCF4mCVim3qkXSw%3A1770714814271&amp;ei=vvaKaYCOENXU1e8P5L_PyAY&amp;biw=1912&amp;bih=948&amp;ved=2ahUKEwino-iKy86SAxWic_UHHRlnDvsQgK4QegQIARAC&amp;uact=5&amp;oq=GNU+InetUtils+%E6%98%AF%E4%BB%80%E4%B9%88&amp;gs_lp=Egxnd3Mtd2l6LXNlcnAiF0dOVSBJbmV0VXRpbHMg5piv5LuA5LmIMggQABiABBiiBDIFEAAY7wUyBRAAGO8FMgUQABjvBTIFEAAY7wVI8BBQAFjkD3AAeACQAQCYAb0BoAGpCqoBAzAuObgBA8gBAPgBAvgBAZgCCaACxArCAgQQIxgnwgIEEAAYHsICBxAAGMcDGB7CAgUQIRigAZgDAJIHAzAuOaAHkxGyBwMwLjm4B8QKwgcFMC44LjHIBxGACAA&amp;sclient=gws-wiz-serp">telnet</a>、<a href="https://www.google.com/search?q=ftp&amp;sca_esv=f5bb93abf84105ec&amp;sxsrf=ANbL-n4AqRXFa1d-E2feCF4mCVim3qkXSw%3A1770714814271&amp;ei=vvaKaYCOENXU1e8P5L_PyAY&amp;biw=1912&amp;bih=948&amp;ved=2ahUKEwino-iKy86SAxWic_UHHRlnDvsQgK4QegQIARAD&amp;uact=5&amp;oq=GNU+InetUtils+%E6%98%AF%E4%BB%80%E4%B9%88&amp;gs_lp=Egxnd3Mtd2l6LXNlcnAiF0dOVSBJbmV0VXRpbHMg5piv5LuA5LmIMggQABiABBiiBDIFEAAY7wUyBRAAGO8FMgUQABjvBTIFEAAY7wVI8BBQAFjkD3AAeACQAQCYAb0BoAGpCqoBAzAuObgBA8gBAPgBAvgBAZgCCaACxArCAgQQIxgnwgIEEAAYHsICBxAAGMcDGB7CAgUQIRigAZgDAJIHAzAuOaAHkxGyBwMwLjm4B8QKwgcFMC44LjHIBxGACAA&amp;sclient=gws-wiz-serp">ftp</a>、<a href="https://www.google.com/search?q=hostname&amp;sca_esv=f5bb93abf84105ec&amp;sxsrf=ANbL-n4AqRXFa1d-E2feCF4mCVim3qkXSw%3A1770714814271&amp;ei=vvaKaYCOENXU1e8P5L_PyAY&amp;biw=1912&amp;bih=948&amp;ved=2ahUKEwino-iKy86SAxWic_UHHRlnDvsQgK4QegQIARAE&amp;uact=5&amp;oq=GNU+InetUtils+%E6%98%AF%E4%BB%80%E4%B9%88&amp;gs_lp=Egxnd3Mtd2l6LXNlcnAiF0dOVSBJbmV0VXRpbHMg5piv5LuA5LmIMggQABiABBiiBDIFEAAY7wUyBRAAGO8FMgUQABjvBTIFEAAY7wVI8BBQAFjkD3AAeACQAQCYAb0BoAGpCqoBAzAuObgBA8gBAPgBAvgBAZgCCaACxArCAgQQIxgnwgIEEAAYHsICBxAAGMcDGB7CAgUQIRigAZgDAJIHAzAuOaAHkxGyBwMwLjm4B8QKwgcFMC44LjHIBxGACAA&amp;sclient=gws-wiz-serp">hostname</a>、<a href="https://www.google.com/search?q=ifconfig&amp;sca_esv=f5bb93abf84105ec&amp;sxsrf=ANbL-n4AqRXFa1d-E2feCF4mCVim3qkXSw%3A1770714814271&amp;ei=vvaKaYCOENXU1e8P5L_PyAY&amp;biw=1912&amp;bih=948&amp;ved=2ahUKEwino-iKy86SAxWic_UHHRlnDvsQgK4QegQIARAF&amp;uact=5&amp;oq=GNU+InetUtils+%E6%98%AF%E4%BB%80%E4%B9%88&amp;gs_lp=Egxnd3Mtd2l6LXNlcnAiF0dOVSBJbmV0VXRpbHMg5piv5LuA5LmIMggQABiABBiiBDIFEAAY7wUyBRAAGO8FMgUQABjvBTIFEAAY7wVI8BBQAFjkD3AAeACQAQCYAb0BoAGpCqoBAzAuObgBA8gBAPgBAvgBAZgCCaACxArCAgQQIxgnwgIEEAAYHsICBxAAGMcDGB7CAgUQIRigAZgDAJIHAzAuOaAHkxGyBwMwLjm4B8QKwgcFMC44LjHIBxGACAA&amp;sclient=gws-wiz-serp">ifconfig</a> 等。</p> <p><strong>主要特点与功能：</strong></p> <ul> <li><strong>核心工具：</strong> 包含 <code>ftp/ftpd</code>（文件传输）、<code>telnet/telnetd</code>（远程登录）、<code>rlogin/rsh/rcp</code>（远程 shell/复制）、<code>ping</code>（网络测试）等。</li> <li><strong>兼容性：</strong> 致力于在不同类 Unix 系统中提供一致的网络工具体验。</li> <li><strong>服务守护进程：</strong> 其中的 <code>telnetd</code> 和 <code>ftpd</code> 通常通过 <code>inetd</code> 或 <code>xinetd</code> 超级服务进行托管。</li> </ul> <p><strong>安全提示（CVE-2026-24061）：</strong> 近期，GNU InetUtils 的 <code>telnetd</code> 服务组件（版本 1.9.3 至 2.7）被发现存在重大远程认证绕过漏洞。攻击者可利用该漏洞在未授权的情况下获取服务器 root 权限，影响包括 Debian 12 和 Ubuntu 24.04 等主流发行版，建议及时更新。</p> <p>GNU InetUtils 1.9.3 至 2.7 版本的 telnetd 服务器存在远程认证绕过漏洞（CVE-2026-24061）。telnetd 服务器在将 USER 环境变量传递给 <code>login(1)</code> 程序之前未进行过滤。攻击者可以提供类似 <code>-froot</code> 的 USER 值来触发 login 程序的认证绕过功能（<code>-f</code> 参数），无需凭据即可获得 root 访问权限。</p>