TELNET: Failure Windows Non-NTLM
This signature detects a TELNET login failure due to a non-NTLM-encrypted user name and/or password on the Windows TELNET server. If TELNET is configured to enable NTLM authentication only, attackers attempting to log in using non-NTLM-encrypted user names and passwords receive the error message "server allows NTLM authentication."
References
URL: http://support.microsoft.com/default.aspx?scid=kb;EN-US;q201194
Short Name
TELNET:FAILURE:NON-NTLM
Severity
Info
Recommended
False
Recommended Action
None
Category
TELNET
Keywords
Failure Non-NTLM Windows
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
False Positive
Rarely