PT-2005-2221 · Microsoft · Windows Server 2003+3

Gaël Delalleau · Publicado 2005-06-14 · Atualizado 2018-10-12 · CVE-2005-1205

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Services for UNIX

Description The issue allows remote attackers to read sensitive environment variables. This is achieved via the NEW-ENVIRON option with a SEND ENV USERVAR command in the Telnet client.

Recommendations For Microsoft Windows XP, consider disabling the Telnet client until a fix is available. For Microsoft Windows Server 2003, restrict access to the Telnet service to minimize the risk of exploitation. For Microsoft Windows Services for UNIX, avoid using the Telnet client with the NEW-ENVIRON option until the issue is resolved.

Correção

Identificadores relacionados

CVE-2005-1205

Produtos afetados

Windows Server 2003

Windows Services For Unix

Windows Xp

Telnet

Referências · 10

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1132 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-033 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A784 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A605 · Nota
• http://securityfocus.com/bid/13940 · Nota
• http://securitytracker.com/id?1014203 · Nota
• http://idefense.com/application/poi/display?id=260&type=vulnerabilities · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1205 · Nota de Segurança
• http://kb.cert.org/vuls/id/800829 · Correção
• http://secunia.com/advisories/15690 · Aviso do Fabricante