Telnet Updates – NET+OS 7.1

Last Updated: 06/18/07 Fix Count: 2

Title
Telnet callback issue

Case: 23230

Date Fixed: 06/18/07

Description

Unpredictable behavior occurs when executing a soft reset after the application has returned an error condition in the telnet receive callback.

Solution

Corrected defect in receive_callback error handler that caused a RESET vector overwrite at address 0.

Title

Telnet Authentication Flaw

Case: 20734

Date fixed: 02/05/07

Description

Telnet was not checking passwords on user accounts containing non zero length passwords, thus allowing access to any valid username, regardless of the password entered. Also, a username that has a valid password defined in the sysaccess database could be used in a telnet login along with carriage return as the password. The user would not be logged in, but the user would be given an infinite number of retires instead of the 3 to which he is supposed to be limited.
 

Solution

Corrected password authentication procedure to use NACheckAuthentication in sysAccess.c. Also, the code that decrements the retry count is now being called properly.

Files: netos\lib\arm7\32b\ghs\libtelnsvr.a
netos\lib\arm9\32b\gnu\libtelnsvr.a
netos\lib\arm7\32b\ghs\ libtelnsvr.a
netos\lib\arm9\32b\gnu\libtelnsvr.a

Special Instructions

• Unzip the patch(es) to the root of your NET+OS installation, for example C:\netos71\.
• Be sure to install any patches listed under Dependencies below
• Rebuild your application.

Patch Link: TelnetUpdates_71

Dependencies

This patch also requires the installation of the following patch(es):

None