Oval Definition:oval:org.mitre.oval:def:1132
Revision Date:2011-05-16Version:48
Title:Windows XP Telnet Environment Disclosure Vulnerability
Description:The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2005-1205
Platform(s):Microsoft Windows XP
Product(s):Services for UNIX
Definition Synopsis
  • Windows XP is installed
  • AND a vulnerable version of telnet.exe exists
  • for specific Windows configurations a vulnerable version of telnet.exe exists
  • 32-bit version of Windows or 64-bit (itanium architecture) version of Windows is installed
  • 32-Bit version of Windows is installed
  • OR a version of Windows for the ia64 architecture is installed
  • AND Win2K/XP/2003/Vista service pack 1 is installed
  • AND the version of telnet.exe is less than 5.1.2600.1684
  • OR 32-bit version of windows with SP2 is installed and vulnerable version of telnet.exe exists
  • the version of telnet.exe is less than 5.1.2600.2674
  • AND 32-Bit version of Windows is installed
  • AND Win2K/XP/2003/Vista/2008 service pack 2 is installed
  • OR for 64-bit (x64 arch) Windows (gold edition) a vulnerable version of telnet.exe exists
  • 64-Bit (x64 architecture) version of Windows is installed
  • AND NOT Win2K/XP/2003 is patched
  • AND the version of telnet.exe is less than 5.2.3790.2442
    • BACK