Take the 2-minute tour ×  I administer a number of linux servers
that require telnet access for users. Currently the user's
credentials are stored locally on each server and the passwords
tend to be very weak and there is no requirement for them to be
changed. The logons will soon be integrated with Active
Directory and this is a more closely guarded identity.  Is it
really a concern that user's password could be sniffed from the
LAN given that we have a fully switched network so any hacker
would need to insert themselves physically between the user's
computer and the server?  share|improve this question Since you
are on linux, try ettercap. Here's a tutorial:
openmaniak.com/ettercap_arp.php –  Joseph Kern Aug 10 '09 at
15:22 -"linux servers that require telnet access"??? I have not
seen a linux server that was missing ssh the last 5-10 years or
so... Feels like I'm missing something here... –  Johan Aug 11
'09 at 20:21 @Johan - The applications running on these servers
have been accessed by telnet for some y