[Telnet Module] False Positive

[superhedgy]

Hi I have been testing it against a bunch of HP printers with telnet services enabled. The telnet module appears to have a bug which returns "success" for any password when two character usernames are supplied.

I have got the following results which I was not able to verify:

# cat telnet-success.txt 
[+] ACCOUNT FOUND: [telnet] Host: xxx User: [E2][80][93] Password: 0 [SUCCESS]
[+] ACCOUNT FOUND: [telnet] Host: xxx User: [E2][80][93] Password: 0 [SUCCESS]
[+] ACCOUNT FOUND: [telnet] Host: xxx User: [E2][80][93] Password: 0P3N [SUCCESS]
[+] ACCOUNT FOUND: [telnet] Host: xxx User: [E2][80][93] Password: 0P3N [SUCCESS]
....

Running Medusa directly from a Kali box.

# medusa -h xxx -u E2 -p anything -M telnet
Medusa v2.2 [http://www.foofus.net] (C) JoMo-Kun / Foofus Networks <[email protected]>

ACCOUNT CHECK: [telnet] Host: xxx (1 of 1, 0 complete) User: E2 (1 of 1, 0 complete) Password: anything (1 of 1 complete)
ACCOUNT FOUND: [telnet] Host: xxx User: E2 Password: anything [SUCCESS]

After digging up a bit E2 80 93 is the hex characters in UTF-8 encoding for dash "-".

[acheong08]

I have the same problem with the http module