Re: Security Vulnerabilities in inetutils telnetd

--000000000000a5f9ad0652ee2435
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Thank you all for the responses,

I've privately contacted Collin and Simon, who have both stepped forward to
handle our report.
This thread can be considered resolved.

Kind regards,
Tal Carmel
Delphos Labs

On Fri, May 29, 2026 at 2:56=E2=80=AFPM Collin Funk <[email protected]=
> wrote:

> Tal Carmel <[email protected]> writes:
>
> > Thank you for the quick reply.
> > Just to confirm, are you sure you'd like me to disclose these POCs in a
> > public list? We would prefer to send this over a secure channel as this
> > information could be weaponised and effect current users of inetutils.
>
> You can email me privately or send it to me on Signal where my username
> is "collinfunk.01".
>
> Either works fine for me.
>
> Thanks,
> Collin
>

--000000000000a5f9ad0652ee2435
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Thank you all for the responses,<div><br></div><div>I&#39;=
ve privately contacted Collin and Simon, who have both stepped forward to h=
andle our report.</div><div>This thread can be considered resolved.</div><d=
iv><br></div><div>Kind regards,</div><div>Tal Carmel</div><div>Delphos Labs=
</div></div><br><div class=3D"gmail_quote gmail_quote_container"><div dir=
=3D"ltr" class=3D"gmail_attr">On Fri, May 29, 2026 at 2:56=E2=80=AFPM Colli=
n Funk &lt;<a href=3D"mailto:[email protected]">[email protected]=
</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:=
0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">=
Tal Carmel &lt;<a href=3D"mailto:[email protected]" target=3D"_blank">tal=
@delphoslabs.com</a>&gt; writes:<br>
<br>
&gt; Thank you for the quick reply.<br>
&gt; Just to confirm, are you sure you&#39;d like me to disclose these POCs=
 in a<br>
&gt; public list? We would prefer to send this over a secure channel as thi=
s<br>
&gt; information could be weaponised and effect current users of inetutils.=
<br>
<br>
You can email me privately or send it to me on Signal where my username<br>
is &quot;collinfunk.01&quot;.<br>
<br>
Either works fine for me.<br>
<br>
Thanks,<br>
Collin<br>
</blockquote></div>

--000000000000a5f9ad0652ee2435--